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IT  PROS  PREPARE  AS 
WAR  IN  INDIA  LOOMS 


U.S.  firms  reviewing  contingency  plans  of 
offshore  software  development  companies 


BY  JAIKUMAR  VIJAYAN 
AND  THOMAS  HOFFMAN 

The  escalating  tension  be¬ 
tween  India  and  Pakistan  is 
prompting  U.S.  outsourcing 
clients  to  review  the  disaster 
preparedness  of  soft¬ 
ware  development  firms 
in  both  countries. 

The  scrutiny  covers 
aspects  such  as  the  de¬ 
velopers’  network  redundancy, 
their  access  to  backup  commu¬ 
nications  circuits,  their  sys¬ 
tems  documentation  practices 
and  their  ability  to  quickly 
move  key  personnel  and  pro- 


Use  may  spur  adoption 
by  private-sector  firms 


BY  PATRICK  THIBODEAU 

WASHINGTON 

The  federal  government  plans 
to  deploy  tens  of  millions  of 
biometric-enabled  smart  cards 
over  the  next  few  years.  The 
resulting  economies  of  scale 
could  lower  product  costs  in 
the  private  sector,  increase  ap¬ 
plication  development  and  im¬ 
prove  card  interoperability. 


cesses  to  safer  locations  in  Eu¬ 
rope  and  North  America. 

There  is  no  indication  that 
the  situation  has  caused  any 
major  U.S.  corporations  to  pull 
out  of  projects  in  the  region, 
analysts  and  vendors 
said.  But  they’re  putting 
contingency  plans  in 
place. 

“We  are  critically 
concerned,  especially  by  the 
nature  of  the  conversation  re¬ 
garding  the  use  of  nuclear 
weapons,”  said  Jim  Beattie, 
chief  technology  officer  at 
CCC  Information  Services 


It’s  a  technology  direction 
that  won  strong  endorsement 
from  the  White  House  last 
week. 

The  biggest  end  user  will  be 
the  new  federal  Transportation 
Security  Administration.  De¬ 
pending  on  how  much  Con¬ 
gress  decides  to  spend,  the 
agency  will  issue  between  10 
million  and  15  million  smart 
cards  to  air,  rail,  sea  and  high¬ 
way  transportation  workers 
over  the  next  three  years. 

Smart  Cards,  page  16 


Inc.,  a  Chicago-based  company 
that  provides  IT  services  to  the 
automotive  claims  and  colli¬ 
sion-repair  industries. 

CCC  is  working  on  a  joint 
application  development  proj¬ 
ect  in  India  with  Cognizant 
Technology  Solutions  Inc.,  a 
Teaneck,  N.J. -based  vendor 
with  operations  in  that  nation. 

Offshore,  page  16 


BIG  RETAILERS 
PUSH  DATA  TIES 

But  suppliers  may  need 
to  revamp  their  systems 


BY  BRIAN  SULLIVAN 
AND  MICHAEL  MEEHAN 

Looking  to  increase  the  elec¬ 
tronic  exchange  of  product 
data,  a  group  of  more  than 
20  top  retailers,  supermarket 
chains  and  consumer  goods 
manufacturers  is  pushing  com¬ 
panies  in  those  industries  to 
adopt  a  common  set  of  data 
synchronization  standards  and 
technology  by  year’s  end. 

The  group  includes  retail 
heavyweight  Wal-Mart  Stores 
Inc.,  which  in  April  notified  its 
Data  Ties,  page  61 


What  They  Want 


WAL-MART  AND  OTHERS  ARE  SEEKING. 

THE  ADOPTION  of  data  syn¬ 
chronization  standards 

THE  USE  of  UCCnet’s  product 
data  registry  service  by  at  least 
600  companies 


DEVELOPMENT  of  data  sharing 
capabilities  among  various  on¬ 
line  exchanges 
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WATCH 


FEDS  EYE  HUGE  SMART-CARD  ROLLOUT 


IT  Re-energizes 
California  Utilities 


California’s  crippling  energy  crisis  of  2000 
and  2001  has  finally  stabilized,  letting  util¬ 
ity  company  IT  leaders  such  as  Southern 
California  Edison  CIO  Mahvash  Yazdi 
(above)  start  looking  beyond  the  present. 
Using  approaches  that  require  both  fiscally 
conservative  and  ambitious  investments, 
they’re  focusing  on  some  big  projects,  in¬ 
cluding  long-overdue  updates  of  key  sys 
terns  and  processes.  The  goal:  to  best  posi¬ 
tion  their  companies  to  deal  with  an  uncer¬ 
tain  future. 


STORY  BEGINS  ON  PAGE  24. 
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for  any  individual 
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(Pooh-pooh  it  now,  while  you  still  can.) 


Welcome  skeptics,  cynics,  and  naysayers. 

Every  major  innovation  in  technology  has  initially  been  met  with  more  than  a  little  resistance.  And  portal  technology 
is  no  different.  But,  like  the  other  innovations,  today's  curiosity  is  well  on  its  way  to  becoming  tomorrow's  necessity. 
Why?  Because,  quite  simply,  CieverPath™  Portal  and  Business  Intelligence  solutions  from  CA  let  you  work  smarter  and 
more  efficiently  than  ever  before.  Not  tomorrow.  Not  someday.  Right  now. 

Work  faster.  Work  smarter.  Work  together.  You'd  be  surprised  how  much  simpler  doing  business  can 
be  with  the  right  tools.  CieverPath  Portal  is  designed  to  be  highly  intuitive,  so  you  can  quickly  navigate  your  way  to 
exactly  what  you  need.  It  delivers  real-time  sales  data,  email,  and  inventory-level  indicators  without  having  to 
open  and  close  multiple  applications  every  time.  Legacy  systems,  mainframes,  desktops,  Web  Services,  and  mobile 
devices  are  now  seamlessly  integrated,  so  you  can  access  a  vast  breadth  of  information  from  anywhere  and  pull  it 
from  one  single,  secure  portal.  You  can  also  rely  on  it  to  automate  your  business  processes,  eliminating  all  the  time 
you  now  waste  trying  to  get  the  right  information  into  the  right  hands.  And,  thanks  to  our  business  intelligence 
tools,  over  time,  it  can  learn  your  preferences  and  deliver  them  before  you  even  ask. 


CieverPath 

Portal  and  Business  Intelligence  Solutions 


Start  working  now. 

The  CieverPath  Portal  "deploy  first,  customize  later"  model  means  you  can  install  and  implement  production-ready 
systems  in  days  or  weeks,  delivering  tangible  ROI  almost  immediately.  CieverPath  Portal  helps  control  costs  in 
other  ways.  CieverPath  Portal  delivers  a  high  degree  of  scalability  in  the  real  world  so  you  can  handle  millions  of 
users.  And  flexible  licensing  means  you  can  select  the  payment  and  licensing  options  that  best  suit  your  individual 
business  needs,  whatever  they  may  be. 


The  CieverPath  family  at  work. 

CieverPath  is  more  than  just  a  single  portal  product.  It's  a  family 
of  unified  portal  and  business  intelligence  solutions  that  deliver 
unique,  online  analytical  analysis,  reporting,  dashboard  development, 
business  rules  automation,  predictive  analysis,  and  visualization 
capabilities.  And  that  means  delivery  of  the  right  information  to  the 
right  people  at  the  right  time  — all  in  a  personalized  way.  Don't  spend 
another  day  without  tapping  into  the  true  value  of  your  enterprise. 
Go  to  ca.com/cleverpath/portal  and  find  out  more  now. 


Computer  Associates™ 


HELLO  TOMORROW’" 


WE  ARE  COMPUTER  ASSOCIATES 


THE  SOFTWARE  THAT  MANAGES  eBUSINESS” 


©2002  Computer  Associates  International,  Inc.  (CA).  All  trademarks,  trade  names,  service  marks  and  logos  referenced  herein  belong  to  their  respective  companies. 
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Storage  in  every  size  and  width. 

The  difference  between  winning  and  losing  is  a  little  thing  called 
“storage.”  And  the  winning  play  is  integrated  storage  solutions.  Why? 
Hardware  and  software  that  work  together  speed  implementation, 
let  you  maximize  your  current  infrastructure  investments,  and  help 
reduce  risk.  IBMTotalStorage"  solutions  are  complete,  cross-platform 
storage  offerings  that  cover  storage  networking,  disk,  tape,  software 
and  services.  Bent  on  winning?  Find  out  where  you  can  test-drive 
any  IBM  storage  solution  at  ibm.com/totalstorage/solutions 


(c)  St/sHniSs  is  iht  ib 


LOFTY  TITLE,  LIHLE  POWER 

Chief  security  officers  may  have  attained 
a  chief-level  title,  but  they  have  little  else 
to  show  for  it.  The  departures  of  top  CSOs 
such  as  Steve  Katz  (left),  formerly  of  Mer¬ 
rill  Lynch,  indicate  the  problems  some 
of  them  are  facing,  even  in  the  wake  of 
Sept.  11.  PAGE  28 


ENTERPRISES  ADDING 
OPEN  SOURCE  TO  MIX 

Corporate  developers  have  quietly 
begun  to  use  a  host  of  open-source 
tools  and  products  to  build  critical 
applications  for  businesses.  PAGE  46 
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NEWS  6 

6  SAP  promises  users  at  its  Sap¬ 
phire  event  that  it  will  make  its 
software  cheaper  and  easier  to  use. 

7  United  Technology  says  a  $4.5 

billion  IT  infrastructure  overhaul 
will  save  the  company  $1  billion 
over  the  next  15  years. 

10  Microsoft  details  technology 
plans  aimed  at  giving  users  single 
sign-on  access  to  information  and 
applications  outside  of  their  own 
companies. 

12  Wall  Street  firms  band  together 
to  create  a  database  to  comply  with 
new  antiterrorism  regulations  for 
screening  out  suspected  criminals. 

14  Hewlett-Packard  outlines 

a  postmerger  restructuring  of 
its  65,000-person  global  IT 
consulting  services  business. 

BREAKING  NEWS 

For  breaking  news,  updated  twice  daily,  visit: 

QuickLink:  a1510 
www.computerworld.com 


BUSINESS  23 

23  Bart  Perkins  writes  that 

having  a  disciplined  process  to 
guide  IT  purchasing  can  save  you 
money.  But,  more  important,  it  can 
help  simplify  your  corporate  IT 
architecture. 

30  Wanna  make  a  better  out¬ 
sourcing  deal?  A  tough  economy 
and  tight  IT  budgets  are  helping 
users  and  vendors  give  fixed 
contracts  the  boot  in  favor  of 
incentive-based  pricing  models. 

38  Workstyles:  A  business-casual 
atmosphere  and  the  ability  to  move 
from  technology  to  the  business 
side  and  back  are  hallmarks  of  the 
culture  at  The  Scotts  Co.,  the  gar¬ 
den  and  lawn  care  products  firm. 

39  Career  Adviser  Fran  Quittel 
offers  advice  to  a  networking  man¬ 
ager  who  wants  to  know  what’s  in 
a  title,  and  to  an  IT  worker  whose 
company  has  delayed  salary  re¬ 
views  and  is  offering  stock  options 
instead. 


TECHNOLOGY  41 

41  Nicholas  Petreley  dissects 
software  license  agreements  and 
what  they  really  mean  to  users. 

42  How  are  Computerworld’ s 

Emerging  Companies  to  Watch  in 
2002  doing  seven  months  after 
they  were  named  to  the  list?  Learn 
which  ones  are  thriving  and  which 
are  struggling  to  survive. 

49  Future  Watch:  Scientists  want 
to  build  a  virtual  human  being.  Its 
•  body  parts  would  be  distributed 
among  labs  around  the  world,  but 
it  would  work  as  a  single  being. 

52  QuickStudy:  Steganography 
is  the  hiding  of  information  with¬ 
in  a  more  obvious  kind  of  com¬ 
munication,  such  as  an  image 
or  sound  file. 

54  Security  Manager’s  Journal: 

A  Web-enabled  PeopleSoft  imple¬ 
mentation  is  put  to  the  test  when 
Mathias  Thurman  assembles  his 
penetration-testing  tools. 


OPINIONS  20 

20  Patricia  Keefe  writes  that  if 

you  want  to  keep  your  users’  trust, 
start  by  re-examining  your  ap¬ 
proach  to  one  of  IT’s  biggest  stum¬ 
bling  blocks:  project  management. 

20  Pimm  Fox  says  the  ASP  model 
is  reaping  big  dividends  in  building 
trades  industries.  Who  says  the 
Internet  doesn’t  pay  off? 

21  David  Moschella  thinks  that 

disagreements  between  the  U.S. 
and  the  European  Union  over  tech¬ 
nology  issues  could  have  serious 
implications,  especially  in  the  area 
of  global  technological  progress. 

62  Frank  Hayes  says  a  letter  from 
Ralph  Nader  to  the  White  House 
and  a  white  paper  by  a  Microsoft- 
funded  think  tank  don’t  get  to  the 
heart  of  the  matter  on  the  use  of 
open-source  software. 
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NEWS  IN  YOUR  IN-BOX 

Sign  up  for  our  free  daily  and  week¬ 
ly  e-mail  newsletters,  and  you’ll  be 
sure  not  to  miss  any  of  the  IT  news 
you  need. 

QuickLink:  a1430 


WILL  THE  FEDS 
LISTEN  TO  NADER? 

Computerworld  community  mem¬ 
bers  weigh  in  on  consumer  activist 
Ralph  Nader’s  suggestion  to  the 
White  House  that  the  government 
can  keep  Microsoft  in  line  by  adopt¬ 
ing  open-source  software. 

QuickLink:  a2160 


HIDDEN  DATA 

After  reading  this  week’s  Quick- 
Study  about  hiding  sensitive  infor¬ 
mation  in  innocent-looking  image 
files,  head  to  our  Web  site  for  links 
to  some  useful  steganography  tools, 
QuickLink:  30130 


WHAT’S  A  QUICKLINK? 


OOn  some  pages  in  this  issue 
you’ll  see  a  QuickLink  code 
pointing  to  additional,  related  c<  >n 


tent  on  our  Web  site.  Just  enter  bat 
code  into  our  QuickLink  box  (  n.hne. 
which  you'll  see  at  the  top  of  each 
page  on  our  site. 


Use  QuickLinks  to  see  related  sto 
ries,  discussion  forums,  research 
links,  archives  and  more. 


NEWS 


Intel  Drops  Q2 
Revenue  Forecast 


Intel  Corp.  lowered  its  revenue  esti¬ 
mate  for  the  quarter  ending  June 
29,  blaming  soft  sales  of  micro¬ 
processors  used  in  desktop  PCs, 
as  well  as  sluggish  demand  for 
chips  in  Europe.  The  company  said 
it  expects  revenue  of  S6.2  billion  to 
S6.5  billion,  down  from  earlier  fore¬ 
casts  of  S6.4  billion  to  S7  billion. 
Intel  expects  better  results  in  the 
second  half  of  the  year. 


IBM  Offers  Remote 
Web  Server  Hosting 

IBM’s  IT  services  unit  announced  an 
off-site  Web  hosting  program  under 
which  it  will  remotely  manage 
servers  located  in  corporate  data 
centers.  The  new  service  is  aimed  at 
companies  that  have  30  to  1,000 
Web  servers  and  that  don’t  want  to 
move  the  systems  to  an  IBM  facility. 
Servers  will  be  linked  to  IBM  hosting 
facilities  via  virtual  private  network 
connections,  the  company  said. 


Deloitte  Consulting 
Set  to  Be  Spun  Off 

Deloitte  Consulting,  the  IT  and  man¬ 
agement  consulting  arm  of  New 
York-based  accounting  firm  Deloitte 
Touche  Tohmatsu,  said  it  expects  to 
become  a  separate,  privately  held 
company  by  year’s  end.  A  merger 
or  sale  has  been  ruled  out,  said  De¬ 
loitte  Consulting,  which  will  change 
its  name  after  the  split  takes  place. 


Nortel  Expects  Stock 
Sales  to  Net  S1.3B 

Nortel  Networks  Ltd.  said  it  expects 
to  raise  $1.3  billion  in  U.S.  currency 
through  a  pair  of  public  stock  and 
equity  offerings.  The  Brampton, 
Ontario-based  company,  which  is 
struggling  for  sales  along  with  other 
telecommunications  equipment  ven¬ 
dors,  said  the  projected  proceeds 
are  about  $500  million  more  than 
it  initially  anticipated. 


SAP  to  Simplify, 
Streamline  Apps 


Vendor  will  remove  unneeded  features, 
make  products  easier  to  use  and  install 


BY  MARC  L.  SONGINI 

ORLANDO 

OOKING  TO  ADDRESS 
some  longtime  user 
concerns  about  its 
business  applica¬ 
tions,  SAP  AG  is 
pushing  to  make  its  software 
faster,  easier  to  use,  cheaper  to 
operate  and  less  complex  for 
small  and  midsize  companies. 

At  its  Sapphire  ’02  user  con¬ 
ference  here  last  week,  SAP 
detailed  a  series  of  upcoming 
products  and  planned  applica¬ 
tion  changes  designed  to  sim¬ 
plify  installation,  use  and  man¬ 
agement  of  the  software  (see 
chart). 

For  example,  SAP  CEO  Hasso 
Plattner  said  during  a  keynote 
speech  that  with  input  from 
users,  the  company  plans  to 
prune  up  to  50%  of  the  features 
from  its  application  suite  be¬ 
cause  they’re  now  obsolete. 
That  should  boost  the  soft¬ 
ware’s  performance  and  lower 


its  total  cost  of  ownership,  ac¬ 
cording  to  Plattner. 

He  also  said  that  SAP  will  re¬ 
place  the  user  interfaces  in 
many  of  its  applications  with 
new  ones  built  around  the 
company’s  browser-based  and 
platform-independent  Web 
Dynpro  technology.  Those 
changes  will  come  with  the 
next  version  of  SAP’s  custo¬ 
mer  relationship  management 
(CRM)  software,  which  was 
announced  last  week  and  is 
due  in  September. 

The  simplification  plan  isn’t 
an  entirely  new  tack  for  SAP, 
which  has  been  working  for 
the  past  four  years  to  make  its 
software  easier  to  use.  None¬ 
theless,  several  IT  managers 
who  are  trying  to  deal  with  the 
complexity  of  the  applications 
said  the  company’s  plans  are  a 
step  in  the  right  direction. 

Gary  Coleman,  vice  presi¬ 
dent  of  information  systems 
at  the  aerospace  division  of 


Goodrich  Corp.  in  Charlotte, 
N.C.,  said  the  quality  of  SAP’s 
flagship  R/3  enterprise  re¬ 
source  planning  software  is 
high.  But  he  added  that  SAP 
needs  to  make  its  technology 
friendlier,  especially  for  users 
at  smaller  companies. 

The  aerospace  unit  went  live 
with  R/3  in  January  after  a  rel¬ 
atively  smooth  14-month  im¬ 
plementation  that  retired  237 
legacy  applications,  Coleman 
said.  But  he  noted  that  some 
smaller  Goodrich  operations 
are  hesitant  about  R/3.  Con¬ 
vincing  them  to  adopt  the  soft¬ 
ware  “will  be  more  challenging 
and  place  more  emphasis  on 
managing  the  total  costs  of 
ownership,”  he  said. 


Jenny  Trautman,  director  of 
IT  at  Atlanta-based  Cox  News¬ 
papers  Inc.,  said  the  company 
is  rolling  out  SAP’s  application 
bundle  for  media  companies 
on  a  test  basis.  The  publisher 
plans  to  go  live  with  R/3’s  hu¬ 
man  resources  module  next 
month,  but  Trautman  said 
there  are  two  hurdles  to  selling 


Rollouts  Include  ‘Cross  Applications 


In  addition  to  its  CRM  software  up¬ 
grade,  SAP  last  week  announced 
plans  to  develop  a  set  of  “cross 
applications"  that  will  work  with  its 
own  software  as  well  as  with  prod¬ 
ucts  from  rival  vendors  such  as  Or¬ 
acle  Corp.  and  PeopleSoft  Inc. 

SAP  said  the  component- 
based  technology  is  aimed  at 
automating  processes  such  as 
real-time  collaboration  and  data- 
sharing  between  companies.  The 
first  product,  due  in  the  fourth 
quarter,  will  support  project  man¬ 
agement  activities. 

Bruce  Richardson,  an  analyst  at 
AMR  Research  Inc.  in  Boston,  said 
the  cross-applications  concept  is 
long  overdue  and  should  give 
users  a  way  to  layer  new  applica¬ 


tions  on  top  of  existing  enterprise 
resource  planning  systems. 

Other  products  announced  at 
Sapphire  included  SAP  Business 
One,  a  set  of  applications  aimed 
at  small  and  midsize  companies. 
The  software,  also  scheduled  for 
release  in  the  U.S.  in  the  fourth 
quarter,  is  based  on  technology 
SAP  acquired  from  Israeli  vendor 
TopManage  Financial  Solutions 
Ltd.  in  March. 

SAP  is  squaring  off  in  that  part 
of  the  market  with  Microsoft 
Corp.,  which  last  month  agreed  to 
buy  Navision  A/S  in  Denmark 
[QuickLink:  29602],  SAP  said 
support  for  exchanging  data  be¬ 
tween  SAP  Business  One  and  its 
applications  for  larger  companies 


is  due  in  the  fourth  quarter. 

SAP  also  announced  collabo¬ 
rative  project  management  soft¬ 
ware  and  said  a  promised  up¬ 
grade  of  its  Web  application  serv¬ 
er  with  built-in  Java  support  is 
now  available.  In  addition,  the 
company  said  it  will  work  with 
San  Jose-based  Adobe  Systems 
Inc.  to  integrate  that  company’s 
document  management  software 
with  the  mySAP.com  suite. 

Jay  Wilson,  CIO  at  prefabricat¬ 
ed  and  mobile  home  manufactur¬ 
er  Cavalier  Homes  Inc.  in  Addi¬ 
son,  Ala.,  said  the  Adobe  support 
would  make  it  easier  for  the  com¬ 
pany’s  online  mortgage  opera¬ 
tions  to  process  legal  documents. 
Cavalier  runs  R/3’s  finance,  distri¬ 
bution  and  materials  manage¬ 
ment  modules. 

-  Marc  L.  Songini 
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SAP  made  the  following 
announcements  at  its 
Sapphire  user  conference: 

of  its  CRM  software 
is  due  this  fall.  It  will  have  a  new 
role-based  user  interface  that  will 
later  be  deployed  in  other  SAP 
applications. 


H 


a  set  of 


applications  that's  tailored  for 
small  and  midsize  companies,  is 
due  in  the  fourth  quarter. 


I 


being  developed  for  midsize  com¬ 
panies  that  have  more  sophisticat¬ 
ed  transaction  needs. 


A  LINE  OF  CROSS-APPLICA¬ 


TION  SOFTWAR 


will  tie  togeth¬ 
er  different  applications  to  manage 
specific  business  processes. 


WM 


EU^gEI/between  SAP’s 
CRM  and  supply  chain  manage¬ 
ment  apps  has  been  increased. 


■ 


the  project  internally:  cost  and 
complexity. 

Cox  is  highly  decentralized, 
and  Trautman  said  some  of  its 
business  units  are  worried 
about  the  potential  difficulty 
of  installing  the  software.  “Var¬ 
ious  parties  said,  ‘It’s  so  com¬ 
plicated  that  we’re  afraid  to  put 
it  in,’  ”  she  said. 

Other  users  and  analysts 
noted  that  SAP’s  software  can 
be  particularly  complex  for  ca¬ 
sual  users  who  don’t  want  to 
master  its  nuances  or  navigate 
through  multiple  screens  to 
process  transactions. 

Tom  Ackerman,  senior  di¬ 
rector  of  business  information 
systems  at  Symbol  Technolo¬ 
gies  Inc.,  said  the  Holtsville, 
N.Y. -based  maker  of  bar  code 
scanners  and  other  handheld 
devices  spent  nine  months 
configuring  SAP’s  mobile  sales 
module,  partly  to  “dumb 
down”  the  software  for  users. 

“We  had  to  keep  it  simple 
and  mask  the  complex  ele¬ 
ments,”  Ackerman  said.  Other¬ 
wise,  he  added,  the  company’s 
sales  staff  likely  wouldn’t  use 
the  software.  I 


APPLICATION-AWARE 


For  more  coverage  of  business  appli¬ 
cations.  head  to  our  Supply  Chain/ERP 
Knowledge  Center: 


O  QuickLink:  k2000 
computerworld.com 
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United  Technologies  in  $4.58  IT  Overhaul 

Changes  include  standardizing  systems 
and  networks,  reducing  servers  and  apps 


BY  LUCAS  MEARIAN 

United  Technologies  Corp. 
(UTC)  announced  last  week 
that  it  is  undergoing  a  com¬ 
plete  IT  infrastructure  over¬ 
haul  and  consolidation  that 
will  cost  $4.5  billion  but  will 
save  the  company  $1  billion 
through  efficiencies  over  the 
next  15  years. 

The  project,  which  UTC  has 
outsourced  to  Computer  Sci¬ 
ences  Corp.  (CSC)  in  El  Segun- 
do,  Calif.,  includes  changing 
out  45,000  PCs,  standardizing 
on  a  single  backup-and-recov- 
ery  platform  and  consolidating 
the  business-critical  work¬ 
loads  in  20  major  data  centers 
into  three.  The  majority  of  the 
work  is  expected  to  be  com¬ 
pleted  by  the  end  of  the  year. 

Most  recently,  CSC  helped 
the  Hartford,  Conn.-based  con¬ 
glomerate  standardized  its 
North  American  data  centers 
on  Mountain  View,  Calif. -based 
Veritas  Software  Corp.’s  Net- 
Backup  storage  software  utility. 
The  suite  gives  UTC  autodis¬ 
covery  features  and  centralized 
and  remote  management  capa¬ 
bilities.  The  company  had  been 
using  a  variety  of  point  prod¬ 
ucts  for  backup  and  manage¬ 
ment  services  that  occasionally 
lost  mission-critical  data. 

“Before,  we  were  dealing 
with  backups  occurring  hap¬ 
hazardly,  depending  upon 
where  a  device  was.  Now 
every  critical  system  will  have 
a  disaster  recovery  plan,”  said 
UTC  CIO  John  Doucette. 

Bob  Zimmerman,  an  analyst 
at  Giga  Information  Group  Inc. 
in  Santa  Clara,  Calif.,  said  that 
many  companies  that  are  con¬ 
solidating  IT  systems  are  dis¬ 
covering  that  their  old  backup 
systems  don’t  work. 

Zimmerman  noted  that  Ver¬ 
itas’  NetBackup  product  tends 
to  be  the  priciest  among  those 
in  its  class,  but  it’s  also  the  eas¬ 
iest  to  configure. 

UTC’s  companies,  which  in¬ 
clude  Pratt  &  Whitney,  Hamil¬ 
ton  Sundstrand  Corp.,  Sikorsky 


Aircraft  Corp.,  Carrier  Corp., 
Otis  Elevator  Co.  and  UTC 
Fuel  Cells,  had  been  operating 
out  of  data  centers  running  on 
proprietary  platforms. 

After  decades  of  growth,  the 
$28  billion  company’s  data 
centers  and  server  farms  were 
dispersed  throughout  the  U.S. 
Its  eight  mainframes,  11  IBM 
AS/400  servers  and  2,950  other 
servers  were  also  dispersed 
among  those  data  centers. 
Since  having  consolidated 
them  into  a  mirrored  data  cen¬ 
ter  on  its  Pratt  &  Whitney 
campus  in  East  Hartford  and 
two  other  data  centers  owned 


But  opposition  to 
law  is  still  strong 

BY  PATRICK  THIBODEAU 

WASHINGTON 

David  Lewis  isn’t  a  lawyer  or  a 
politician.  But  that  didn’t  keep 
him  from  preventing  UCITA 
from  being  introduced  in  the 
Utah  state  legislature. 

And  the  CIO  at  Deseret  Mu¬ 
tual  Benefit  Administrators  in 
Salt  Lake  City  has  a  message 
for  IT  managers  concerned 
about  this  software  licensing 
law.  “One  thing  I  have  learned 
in  this  process  is  that  it  doesn’t 
take  very  many  voices  to  have 
an  influence,”  said  Lewis. 

The  Uniform  Computer  In¬ 
formation  Transactions  Act 
wasn’t  passed  in  any  state  this 
year  because  of  vocal  opposi¬ 
tion  and  a  decision  by  its 
drafters  not  to  press  for  adop¬ 
tion  until  some  changes  were 
made  to  it.  Those  proposed 
changes  were  finalized  late 
last  month. 

If  the  changes  win  approval 


by  CSC  in  Meriden,  Conn.,  and 
Norwich,  Conn.,  the  company 
needs  only  two  mainframes 
and  two  AS/400  systems.  It  ex¬ 
pects  to  drop  about  350  servers 
by  the  end  of  the  year. 

“We  identified  160,000  pieces 
of  software  and  probably  end¬ 
ed  up  putting  5,000  pieces  of 
software  back,”  Doucette  said. 
“The  other  thing  we  did  with 
our  PCs  was  to  lock  them 
down.  People  can’t  go  out  on 
the  Internet  and  download  soft¬ 
ware  onto  them.  There’s  just 
tons  of  inefficiencies  with  that.” 

UTC  is  creating  two  storage- 
area  networks,  also  to  be  locat¬ 
ed  on  the  East  Hartford  cam¬ 
pus,  that  will  run  off  of  Hitachi 
Data  Systems  Corp.  Freedom 
Storage  9900  and  EMC  Corp. 
Symmetrix  RAID  boxes. 


at  the  National  Conference  of 
Commissioners  on  Uniform 
State  Laws’  (NCCUSL)  annual 
meeting  beginning  July  26, 
UCITA  will  be  ready  for  a 
new  push  for  acceptance.  The 
Chicago-based  group  develops 
uniform  commercial  laws  for 
state-by-state  adoption. 

If  opposition  “remains  vocif¬ 
erous  and  widespread,  we  will 
have  problems  with  UCITA,” 
said  John  McCabe,  legislative 
director  of  the  NCCUSL.  But  if 
the  proposed  changes  can  mol¬ 
lify  some  opponents,  he  added, 
“then  this  may  have  some  op¬ 
portunities.  But  we  have  to 
wait  and  see.” 

Cautious  Optimism 

Proponents  acknowledge 
that  they  can’t  satisfy  everyone 
but  said  that  they  hope  the 
changes  to  the  proposed  law 
can  peel  away  some  opponents. 

The  changes  that  represent 
the  most  significant  potential 
consequences  for  IT  were  of¬ 
fered  earlier  this  year.  Those 
include  the  elimination  of  a 
provision  that  would  allow 


The  company  is  also  stan¬ 
dardizing  its  network  on  Com¬ 
puter  Associates  International 
Inc.’s  Unicenter  TNG  manage¬ 
ment  tool.  In  another  move, 
UTC  consolidated  15  help  desks 
running  nine  applications  into 
one  center  running  one  system. 

Henning  Kerger,  director  of 
transformation  for  CSC’s  UTC 
account,  said  a  CSC  site  in 
Newington,  Conn.,  will  be  used 
for  UTC’s  Web  hosting  facility. 

“The  biggest  challenge  was 
to  get  away  from  a  disparate 
situation,  where  every  busi¬ 
ness  unit  was  unique  and  had 
its  own  standards  and  quality 
of  people  varying  from  unit  to 
unit,”  Kerger  said. 

For  example,  UTC  found  it¬ 
self  with  multiple  PC  platforms. 
While  it  had  considered  chang¬ 
ing  out  20%  of  its  workstations 
and  platforms  each  year,  Dou¬ 
cette  said  that  would  have  made 


vendors  to  remotely  shut  down 
systems  in  a  contract  dispute, 
as  well  as  one  that  would  allow 
reverse-engineering  for  inter¬ 
operability,  which  was  previ¬ 
ously  banned. 

But  following  the  release  of 
those  initial  changes,  the  Soci¬ 
ety  for  Information  Manage¬ 
ment  said  UCITA  remains  too 
flawed  to  support.  The  Chicago- 
based  organization  has  some 
2,600  members,  many  of  whom 
are  senior  IT  managers. 

Two  years  ago,  Lewis  met 
with  the  president  of  the  Utah 
Senate  to  discuss  UCITA.  Also 
at  that  meeting  was  a  lawyer 
from  a  software  company,  ad¬ 
vocating  UCITA.  Lewis  be- 


AT  A  GLANCE 


Round  2? 

WHAT’S  NEW:  In  response  to  oppo¬ 
nents,  the  UCITA  drafters  made  some 
changes  and  added  consumer-protec¬ 
tion  language.  But  drafters  rejected 
recommendations  such  as  one  that 
would  require  a  license  to  be  made 
available  before  a  licensee  pays  or  is 
obligated  to  do  so. 


THE  OUTLOOK:  Uniform  laws  can  take 
years  to  win  state  adoption:  UCITA’s 
backers  are  in  it  for  the  long  haul. 


WHAT’S  NEXT:  Once  the  changes  to 
UCITA  are  incorporated,  expect  a  new 
push  for  states’  adoption  of  the  act 


UCITA  Backets  Hatch  New 
Plans  for  Adoption  Push 


/ 


it  more  difficult  to  standardize. 

The  company  has  completed 
about  95%  of  a  changeover  to 
Dell  Computer  Corp.  PCs  run¬ 
ning  Windows  2000  and  Office 
2000.  Doucette  said  that  along 
with  the  remote  control  of  sys¬ 
tems,  that’s  “the  biggest  part  of 
reducing  cost.”  I 


UTC  Transformed 

UTC’s  outsourcing  deal 
with  CSC  includes: 

Changing  out  45,000  PCs 
on  disparate  platforms 

Consolidating  20  data 
centers  into  three 

Creating  two  mirrored 
storage-area  networks 

Standardizing  on  a  single 
backup-and-recovery  platform 

Standardizing  on  a  network 
management  platform 


lieves  that  as  a  result  of  his  in¬ 
volvement,  the  Senate  presi¬ 
dent  was  able  to  understand 
the  depth  of  the  controversy. 
“You  don’t  need  a  legal  mind  to 
understand  this  is  a  very  one¬ 
sided  law,”  said  Lewis. 

The  president  told  both  sides 
to  work  out  their  differences. 

UCITA  sets  default  rules  for 
software  licensing.  Vendors 
support  the  act,  but  it’s  op¬ 
posed  by  a  coalition  of  end 
users,  library  and  consumer 
groups,  and  32  state  attorneys 
general,  who  say  the  law  gives 
vendors  too  much  power  on 
contracts.  This  active  opposi¬ 
tion  has  succeeded  in  limiting 
UCITA’s  adoption  to  only  two 
states,  Virginia  and  Maryland. 

The  latest  set  of  amend¬ 
ments  are  in  response  to  a  Feb¬ 
ruary  report  by  a  committee  of 
the  Chicago-based  American 
Bar  Association  that  cited  nu¬ 
merous  problems  with  UCITA 
and  called  for  a  rewrite. 

Carol  Ashworth,  who’s  head¬ 
ing  an  anti-UCITA  effort  at  the 
American  Library-  Associa¬ 
tion’s  office  in  Washington, 
said  she  saw  little  in  the  changes 
to  convince  her  that  the  pro¬ 
posed  law  has  been  reformed. 

“There  is  some  tweaking 
that  is  going  on,  but  substan¬ 
tively,  there  haven’t  been  any 
real  changes,”  said  Ashworth.  ► 


DOMVB 


8  NEWSCOMPUTERWORLD  HONORS 

The  Best  of  the  Best 


Computerworld  honors  pioneers  and 

innovative  projects  in  IT  at  gala  event 


BY  BOB  BREWIN 

WASHINGTON 

COLLABORATIVE 
effort  to  harness 
the  power  of  PCs 
to  listen  for  faint 
signals  from  the 
far  reaches  of  the  universe,  a 
Web  site  dedicated  to  peace 


and  designed  to  help  children 
deal  with  the  aftermath  of  last 
year’s  terrorist  attacks,  and  a 
transnational  effort  to  provide 
computer-based  education  to 
15  African  countries  were 
among  the  10  IT  projects  se¬ 
lected  for  recognition  last  week 
as  part  of  the  annual  Compu¬ 


terworld  Honors  program. 

Patrick  J.  McGovern,  chair¬ 
man  of  International  Data 
Group,  Computerworld’ s  parent 
company,  said  the  people  be¬ 
hind  these  projects  harnessed 
their  passions  to  the  power  of 
technology  in  ways  that  can 
change  the  world,  dubbing 
these  pioneers  “the  new  he¬ 
roes”  of  the  global  IT  industry. 

At  a  gala  dinner  at  the  Na¬ 
tional  Building  Museum  here, 
McGovern  said  the  achieve¬ 


ments  of  the  individuals  and 
organizations  selected  for  in¬ 
clusion  in  the  Honors  program 
over  the  years  have  been  ar¬ 
chived  at  140  universities  and 
research  institutions  world¬ 
wide  and  on  Web  sites  that  have 
received  800  million  hits,  N 


AND  THE  WINNERS  ARE... 

For  a  complete  list  of  Computerworld 
Honors  program  winners,  visit  our  Web  site: 

QuickLink:  30296 
www.computerworld.com 


The  National  Building  Museum  in  Washington 


IDG  Chairman  Patrick  McGovern  Maryfran  Johnson,  Computer- 
sali  es  the  heroes  of  global  IT.  world’s  editor  in  chief 
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SOME  OF  THE  WINNERS... 
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Idit  Harel,  MaMaMedia  Inc. 


Theodore  Ahlers,  African  Virtual 
University 


Vinton  G.  Cerf,  WorldCom  Inc. 


Lisa  Henley,  Oklahoma  Department 
of  Human  Services 


Heyward  Donigan,  Cigna  Healthcare 
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Unisys,  Post  Office 
Settle  Y2k  Claims 

The  U.S.  Postal  Service  said  that 
Unisys  Corp.  agreed  to  pay  about 
$900,000  to  settle  Y2k-related 
overbilling  claims.  The  dispute 
involved  systems  remediation  work 
done  by  unqualified  workers  or  not 
performed  as  required,  the  Postal 
Service  said.  Blue  Bell,  Pa.-based 
Unisys  declined  to  comment. 

Sun  Patches  Two 
Holes  in  Solaris 

Sun  Microsystems  Inc.  issued  a 
software  patch  to  plug  a  pair  of 
security  holes  that  could  be  used 
to  gain  root-level  access  to  servers 
running  three  versions  of  its  Solaris 
operating  system.  Sun  said  the  vul¬ 
nerabilities  were  discovered  in  Sim¬ 
ple  Network  Management  Protocol 
agents  in  Solaris  2.6, 7  and  8.  Sys¬ 
tems  are  only  vulnerable  if  they  run 
both  agents,  the  company  added. 

Dell  Buys  Firm, 
Expands  IT  Services 

Dell  Computer  Corp.  acquired  Plural 
Inc.,  a  New  York-based  company 
that  offers  application  development, 
integration  and  consulting  services 
to  users  running  Microsoft  Corp. 
software.  The  companies  didn’t  dis¬ 
close  the  terms  of  the  deal,  which 
is  aimed  at  boosting  Dell's  relatively 
small  IT  services  business.  Plural, 
which  has  200  employees,  had 
revenue  of  $46  million  last  year. 


Kumar  Says  Users 
Holding  Off  on  Buys 

Sanjay  Kumar,  CEO  of  Computer 
Associates  International  Inc.,  said 
many  corporate  users  still  aren’t 
investing  in  future  IT  needs,  even 
though  they  have  become  less  jit¬ 
tery  about  making  purchases.  The 
reluctance  to  spend  “might  stay 
around  for  a  while,”  Kumar  said  at 
a  meeting  that  Islandia,  N.Y.-based 
CA  held  with  financial  analysts. 
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Microsoft  Developing 
ID-Sharing  Software 


TrustBridge  technology  to  support  single 
sign-on  but  won't  be  ready  until  next  year 


Microsoft’s  plans 
for  Web  services 


BY  CAROL  SLIWA 

ICROSOFT LAST 
week  laid  out 
more  details 
about  its  secu¬ 
rity  road  map 
for  Web  services,  unveiling 
Windows-based  software  that 
aims  to  help  businesses  share 
user  identity  information  with 
one  another. 

The  announcement  gave  Mi¬ 
crosoft  Corp.  a  marketing  jump 
on  the  rival  Liberty  Alliance 
Project  backed  by  Sun  Micro¬ 
systems  Inc.,  which  isn’t  ex¬ 
pected  to  reveal  the  first  part 
of  its  technical  specification 
until  later  this  summer.  But 
the  Microsoft  software,  code- 
named  TrustBridge,  isn’t  due 
to  ship  until  next  year.  And 
right  now,  little  is  known  about 
the  final  form  it  will  take. 

Steven  VanRoekel,  director 
of  Web  services  marketing 
at  Microsoft,  said  TrustBridge 


System  sniffs  for 
rogue  access  points 

BY  BOB  BREWIN 

Wireless  LAN  security  got 
some  long-needed  help  last 
week,  observers  said,  when 
AirDefense  Inc.  released  a 
product  that  can  detect  wire¬ 
less  hackers  and  unauthorized 
rogue  access  points  installed 
on  enterprise  networks  by  em¬ 
ployees  or  malicious  intruders. 

Alpharetta,  Ga.-based  Air- 
Defense’s  namesake  security 
appliance,  which  began  ship¬ 
ping  last  week,  includes  a  soft¬ 
ware  database  containing  the 
electronic  signatures  of  most 
wireless  LAN  cards  as  well 


could  be  sold  separately  or 
bundled  into  a  product,  such  as 
the  Windows  .Net  server  oper¬ 
ating  systems  or  the  Internet  Se¬ 
curity  and  Acceleration  Server. 

One  of  the  main  potential 
benefits  of  the  TrustBridge 
software  is  that  it  will  enable 
users  from  one  company  to  log 
in  and  prove  their  identities 
just  once,  on  their  own  sys¬ 
tems,  to  gain  access  to  applica¬ 
tions  and  resources  they’re  au¬ 
thorized  to  use  on  other  com¬ 
panies’  systems. 

Steven  Sommer,  CIO  at  New 
York  law  firm  Hughes  Hub¬ 
bard  &  Reed  LLP,  said  he  can 
envision  allowing  clients  or 
other  law  firms  to  access  a 
database  relating  to  a  particu¬ 
lar  case  through  Web  services, 
rather  than  duplicating  the  in¬ 
formation  and  giving  copies. 

“We’ve  been  looking  for  the 
one  sign-on  approach  within 
our  own  organization,  so  this  is 


as  the  signatures  of  wireless 
hacking  freeware  such  as  Net- 
Stumbler. 

The  system  monitors  the 
area  around  an  office  building 
or  manufacturing  plant  for  sig¬ 
nals  in  the  2.4-GHz  frequency 
band.  It  sniffs  the  airwaves  for 
signals  and  then  compares 
them  to  authorized  devices 
and  software  that  are  listed  in 
the  database. 

Jay  Chaudhry,  CEO  of  Air- 
Defense,  said  these  features 
can  let  network  managers 
identify  probes  of  a  wireless 
LAN  network  or  detect  the  op¬ 
eration  of  a  rogue  access  point 
connected  to  the  network. 

Dave  Bray,  director  of  net¬ 
work  technology  services  at 
ADC  Telecommunications  Inc. 


security: 

.NET  PASSPORT  authentica¬ 
tion  service  for  business- 
to-consumer  interaction  will 
add  support  for  Kerberos  and 
other  key  Web  service  stan¬ 
dards  next  year. 

VISUAL  STUDIO  .NET  will 
support  WS-Security  later 
this  year  to  allow  developers 
to  add  digital  signature  sup¬ 
port  and  SOAP  message 
encryption. 

WINDOWS  .NET  SERVER,  due 

to  ship  next  year,  will  provide 
cross-directory  trust,  integra¬ 
tion  of  Passport  and  security 
protocol  translation. 


just  an  extension,”  Sommer 
said.  “I  think  that  would  be  a 
boon  to  us,  and  less  expensive 
to  maintain  in  the  long  run.” 

But  some  corporate  users 
said  they  see  no  pressing  need 
for  the  TrustBridge  software. 

Jon  DelFAntonia,  vice  presi- 


in  Eden  Prairie,  Minn.,  said  his 
company  is  evaluating  the  sys¬ 
tem.  He  said  he  hasn’t  “seen 
another  product  like  this.” 

Bray  said  that  ADC,  which 
has  more  than  100  facilities 
worldwide,  is  “worried  about 
rogue  access  points,  because 
the  price  has  come  down  so  far 
[to  around  $100]  that  almost 
anyone  can  go  out  and  buy 
one.  They’re  also  easy  to  in¬ 
stall,  and  once  installed,  some¬ 
one  can  sit  in  our  parking  lot 
and  gain  access  inside  our 
trusted  network.” 

Matthew  Kovar,  an  analyst  at 
The  Yankee  Group  in  Boston, 
said  AirDefense  is  ahead  of  the 
competition  in  developing  a 
multifaceted  security  tool  for 
the  wireless  LAN  market.  R 


dent  of  information  systems  at 
OshKosh  B’Gosh  Inc.  in  Osh¬ 
kosh,  Wis.,  said  his  company 
already  accesses  401(k)  and 
other  human  resources  infor¬ 
mation  from  an  outside  firm, 
and  the  advantage  of  switching 
to  a  Web-services-based  sys¬ 
tem  is  unclear  to  him. 

DelFAntonia  said  he  can  see 
the  potential  value  of  the 
TrustBridge  technology,  but  he 
noted  that  he  can’t  dictate 
what  type  of  software  his  out¬ 
side  providers  use. 

Catherine  Quirk,  an  analyst 
at  Boston-based  AMR  Re¬ 
search  Inc.,  said  the  main 
downside  is  that  in  order  to  get 
the  optimal  security  features, 
both  parties  must  be  running 
the  TrustBridge  software.  Van¬ 
Roekel  noted  that  both  parties 
must  also  use  Active  Directory 
or  some  other  directory  that 
supports  Kerberos  Version  5. 

He  said  that  under  the  Trust- 
Bridge  scenario,  users  would 
log  on  to  their  systems  and  re¬ 
ceive  tickets  that  employ  Ker¬ 
beros  technology  to  ensure 
that  they’re  valid  users.  The 
TrustBridge  software  encapsu¬ 
lates  that  information  into  an 
XML-based  message,  which  is 
transmitted  through  the  corpo¬ 
rate  firewall’s  HTTP  port  via 
the  Simple  Object  Access  Pro¬ 
tocol  to  another  company. 

The  other  firm’s  TrustBridge 
software  would  then  decode 
the  message  and  pass  the  infor¬ 
mation  to  the  network,  finaliz¬ 
ing  a  trust  relationship,  Van¬ 
Roekel  said. 

John  Pescatore,  an  analyst  at 
Stamford,  Conn.-based  Gart¬ 
ner  Inc.,  said  the  Microsoft  sys¬ 
tem  will  enable  companies  to 
use  Windows  servers  for  au¬ 
thentication  instead  of  paying 
companies  that  will  charge 
per-user  fees  for  that  service. 

“The  downside  to  IT  shops 
is  they  start  getting  driven 
more  and  more  to  a  single  plat¬ 
form,”  he  said.  “This  puts  added 
pressure  on  the  Liberty  Alliance 
to  quickly  come  out  with  their 
standards  for  doing  this  same 
type  of  trust  brokering.”  I 


SECURITY  UPDATE 

For  security  news  and  resources, 
visit  our  Web  site: 

QuickLink:  k1600 
www.computerworld.com 


Security  Appliance  Monitors  Wireless  LANs 
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Controversy  Clouds  Calif. 

Energy  Market  Systems 


Foggy  regulations ,  unwieldy  technology 
complicate  charges  of  Perot  impropriety 


BY  MELISSA  SOLOMON 

senate  investiga¬ 
tion  into  whether 
Perot  Systems 
Corp.  coached  en¬ 
ergy  suppliers  to 
manipulate  the  very  systems  it 
built  for  California’s  electrical 
power  grid  operators  raises  a 
fundamental  question:  Does 
the  state  have  the  wherewithal 
to  develop  a  workable  system  to 
manage  the  energy  market? 

The  development  of  risk- 
management  software  to  en¬ 
sure  that  market  participants 
are  playing  by  the  rules  is  easy, 
according  to  Ethan  Cohen,  a 
manager  at  Blue  Ridge  Part¬ 
ners,  a  utility  and  financial 
services  consulting  firm  in 
McLean,  Va. 

But  without  clear  rules  from 
the  Federal  Energy  Regula¬ 
tory  Commission  (FERC)  about 
what  constitutes  illegal  activity 
and  the  consequences  of  violat¬ 
ing  the  rules,  the  systems  are 
useless,  he  said. 

“I  don’t  think  anyone  at  the 
end  of  the  day  wants  FERC  to 
be  a  dogged  policeman  of  the 
energy  markets,”  said  Cohen. 
“But  FERC  hasn’t  said  anything 
consistent  about  bulk  power 
markets  in  20  years.” 

That  may  account  for  some 
of  the  haziness  over  legal  and 
ethical  issues  associated  with 
last  week’s  revelations  about 
the  alleged  activities  of  Plano, 
Texas-based  Perot  Systems. 

Slide  presentations  released 
last  week  by  the  Senate  sub¬ 
committee  investigating  price 
manipulation  in  California’s 
wholesale  markets  describe 
“holes”  in  the  state’s  energy 

PEROTPOIHT 

For  access  to  the  Perot  Systems  slide 
presentation,  visit  our  Web  Site. 

QuickLink:  a2170 
www.computerworld.com 


market  system  and  strategies 
that  firms  could  use  to  increase 
congestion  and  drive  up  costs. 

The  slide  presentations  were 
prepared  by  Perot  Systems  and 
uncovered  by  the  subcommit¬ 
tee  in  subpoenaed  documents 
turned  over  by  Houston-based 
Reliant  Energy  Corp.  Perot 
Systems  was  one  of  two  con¬ 
tractors  hired  to  build,  test  and 
manage  the  computer  systems 
for  the  California  Independent 
System  Operator  (ISO)  and  the 
now-defunct  California  Power 
Exchange  Corp. 

But  Stephanie  McCorkle,  a 


BY  LUCAS  MEARIAN 

More  than  a  dozen  Wall  Street 
firms  are  joining  forces  to  cre¬ 
ate  a  company  that  will  offer  a 
customer  database  to  the  fi¬ 
nancial  services  industry  for 
screening  out  suspected  crimi¬ 
nals.  The  move  is  intended  to 
help  companies  comply  with 
new  antiterrorist  regulations. 

The  Regulatory  DataCorp 
Int’l  LLC  is  principally  the  cre¬ 
ation  of  The  Goldman  Sachs 
Group  Inc.  in  New  York,  but 
it’s  also  being  financially  sup¬ 
ported  by  firms  such  as  Merrill 
Lynch  &  Co.,  Citigroup  Inc. 
and  UBS  PaineWebber  Inc. 

The  company  is  expected  to 
launch  in  the  next  couple  of 
weeks,  said  a  Goldman  Sachs 
spokeswoman.  Other  compa¬ 
nies  involved  in  the  venture 
didn’t  return  phone  calls  or 
declined  to  comment. 

According  to  published  re¬ 
ports,  Regulatory  DataCorp 
will  compile  information  from 


spokeswoman  for  the  ISO,  said 
last  week  that  it’s  not  clear  that 
any  of  the  strategies  described 
in  the  Perot  presentation  re¬ 
vealed  classified  information. 

“Obviously,  we  would  be  ex¬ 
tremely  concerned  if  there  was 
a  business  relationship  estab¬ 
lished  and  proprietary  infor¬ 
mation  was  released,”  said  Mc¬ 
Corkle.  If  the  ISO 
finds  that  Perot  vi¬ 
olated  its  confiden¬ 
tiality  clause,  it  will 
bring  the  matter  to 
court,  she  said. 

In  a  statement  last  week, 
Perot  Systems  said  it  prepared 
the  presentation  to  help  the 
ISO  identify  and  correct  flaws 
in  the  system  and  insisted  that 
it  didn’t  share  the  information 


public  resources  including  in¬ 
ternational,  federal  and  local 
law  enforcement  records.  It 
will  then  sell  access  to  the 
database  to  other  companies 
so  they  can  screen  potential 
customers.  Regulatory  Data¬ 
Corp  will  be  a  separate  com¬ 
pany  from  its  founders,  said 
the  Goldman  Sachs  spokes¬ 
woman,  who  declined  to  com¬ 
ment  further  on  the  venture. 

While  not  unique,  the  data¬ 
base  would  be  among  only  a 
handful  in  the  world  perform¬ 
ing  industrywide  customer 
searches,  according  to  Brian 
Smith,  a  partner  at  law  firm 
Mayer,  Brown,  Rowe  &  Maw  in 
Washington,  which  specializes 
in  regulatory  issues  in  the  fi¬ 
nancial  services  marketplace. 

“The  big  difference  here  is 
that  it  is  financial  services 
firms  doing  this  and  not  tech¬ 
nology  companies,”  he  said. 

Since  the  U.S.  Patriot  Act 
was  passed  by  Congress  in  re- 


with  market  participants. 

In  March  1997,  Perot  and 
Zurich-based  ABB  Ltd.  won  a 
yearlong  $57  million  contract 
from  the  ISO  to  lead  an  alliance 
of  vendors  to  develop,  test  and 
manage  a  systems  platform  to 
operate  the  state’s  deregulated 
power  market. 

That’s  where  the  fundamen¬ 
tal  problem  lies  — 
in  the  ISO’s  com¬ 
puter  systems,  said 
Chris  Schreiber,  an 
aide  to  Sen.  Joseph 
Dunn  (D-Calif.),  co- 
chairman  of  the  Senate  sub¬ 
committee  that  released  the 
Perot  presentation. 

“The  system  is  so  cumber¬ 
some  . . .  and  no  one  [at  the 
ISO]  knows  how  to  run  it,  and 


sponse  to  the  Sept.  11  terrorist 
attacks,  banks  and  brokerages 
have  been  scrambling  to  com¬ 
ply  with  rules  that  require  them 
to  “know  their  customers”  pri¬ 
or  to  allowing  them  to  open 
accounts  (see  box). 

Richard  DeLotto,  an  analyst 
at  Gartner  Inc.  in  Stamford, 
Conn.,  said  it  makes  sense  for 
the  firms  to  work  together.  “If 
there’s  a  bad  guy  working  in 
town,  he’s  going  to  walk  from 
bank  to  bank.  So  it  increases  the 
likelihood  of  catching  a  money 
launderer  or  terrorist,”  he  said. 

British  banking  compliance 


The  Patriot  Act 


THE  U.S.  FWRIOTffCT 
REQUIRES  BANKS  TO: 

VERIFY  the  identity  of  anyone 
seeking  to  open  an  account. 

MAINTAIN  records  of  the 
information  used  to  verify 
a  person's  identity. 

DETERMINE  if  the  person 
opening  the  account  is  on  any 
government-provided  lists  of 
known  or  suspected  terrorists 
or  terrorist  organizations. 

SOURCE:  GARTNER  INC..  STAMFORD,  CONN. 


Wall  Street  Aims  to  Thwart 
Criminals  With  Database 


MORE  THIS  ISSUE 

IT  is  re-energizing  California 
utility  companies.  Page  24 
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Power  Play 

The  IT  systems  that  Perot  and 
ABB  built  for  the  California 
energy  market  operator  include: 

■  Energy  management  system  to  monitor 
real-time  performance  of  the  electric  system 

■  Plant  information  system  that  provides 
power  plant  data 

■  Scheduling  infrastructure  and  applications 
to  balance  energy  production  and  use 

■  An  Internet-enabled  automated  dispatch 
system  for  last-minute  energy  needs 

■  Meter  data  acquisition  system 

■  Systems  that  bill  customers  and  settle  dif¬ 
ferences  between  deliveries  and  schedules 

■  A  data  warehouse 


no  one  understands  it,”  he  said. 

On  May  1,  the  ISO  submitted 
a  new  systems  design  plan  to 
the  FERC  that  addresses  and 
corrects  many  of  the  loopholes 
that  have  been  identified,  said 
McCorkle.  The  FERC  is  sched¬ 
uled  to  review  and  make  a  de¬ 
cision  on  the  plan  by  October.  I 


firm  World-Check  Inc.,  which 
is  supported  by  Swiss  banks, 
gained  notoriety  when  it  was 
discovered  in  February  that  it 
had  profiles  of  15  of  the  19  Sept. 
11  hijackers  in  its  database  and 
had  listed  them  as  “high  risk.” 
World-Check  claims  to  have  a 
total  of  approximately  55,000 
individuals  listed. 

The  Financial  Services  In¬ 
formation  Sharing  and  Analy¬ 
sis  Center  is  a  private  organiza¬ 
tion  in  New  York  that  charges 
companies  a  minimum  $7,000 
annual  fee  for  alerts  and  access 
to  information  about  hacking 
and  cyberterrorism  threats. 

However,  some  privacy  ad¬ 
vocates  fear  that  private  indus¬ 
try  databases  will  prevent  con¬ 
sumers  from  reviewing  infor¬ 
mation  affecting  their  ability  to 
use  financial  services. 

“There  have  been  concerns 
that  [other  databases]  operate 
under  a  cloak  of  secrecy,”  said 
Stephen  Keating,  executive  di¬ 
rector  of  The  Privacy  Founda¬ 
tion  in  Denver.  He  said  Regula¬ 
tory  DataCorp’s  database  could 
be  more  comprehensive  than 
others  because  it’s  expected  to 
retrieve  information  from  hun¬ 
dreds  of  sources  worldwide.  I 


ALL  OTHERS 
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Merged  HP  to  Boost 
Consulting,  Services 

Company  realigning  65,000-person 

services  organization  into  five  areas 


BY  JAIKUMAR  VIJAYAN 

EWLETT-PACKARD 
Co.  will  focus  on 
delivering  a  wide 
range  of  IT  con¬ 
sulting  and  busi¬ 
ness  process  services  as  part  of 
its  postmerger  strategy,  a  se¬ 
nior  executive  said  last  week. 

To  lay  the  groundwork  for 
that  effort,  HP  is  realigning  its 
65,000-person  services  organi¬ 
zation  into  five  major  areas:  IT 
and  business  governance  ser¬ 
vices,  agile  and  mission-criti¬ 
cal  infrastructure  services, 
extended  enterprise  services, 
open-environment  services 
and  next-generation  technolo¬ 
gy  services. 

The  goal  is  to  expand  HP’s 
services  capabilities  beyond  its 


current  emphasis  on  IT  infra¬ 
structure  support,  said  Juergen 
Rottler,  a  senior  vice  president 
with  HP’s  services  organiza¬ 
tion.  Going  forward,  HP’s  em¬ 
phasis  will  be  on  building  ca¬ 
pabilities  that  let  it  engage 
with  users  from  the  applica¬ 
tion  design  stage  right  through 


HP  UPDATE 


In  a  briefing  with  financial  an¬ 
alysts  last  week,  HP  executives 
also  said  the  company: 

*  Expects  to  complete  15,000  layoffs  by 
October,  2003. 

■  Has  offered  voluntary  retirement  options 
to  900  employees. 

*  Will  realize  a  $2.5  billion  cost  savings 
from  its  Compaq  acquisition  by  October, 
2003. 


integration,  management  and 
end-of-life/migration  services. 

“We  are  talking  about  signif¬ 
icantly  more  end-to-end  ser¬ 
vices  that  start  with  customer 
business  problems  rather  than 
just  a  technology,”  he  said. 

Don’t  expect  to  see  any  ma¬ 
jor  new  HP  services  offerings 
in  the  near  term  though,  cau¬ 
tioned  Eric  Rocco,  an  analyst  at 
Gartner  Inc.’s  San  Jose-based 
Dataquest  unit. 

For  the  next  12  to  18  months 
or  so,  HP  is  likely  to  be  preoc¬ 
cupied  with  the  task  of  inte¬ 
grating  its  own  services  orga¬ 
nization  with  that  of  Compaq 
Computer  Corp.,  Rocco  said. 

“But  their  goal  certainly  is  to 
take  what  is  currently  the 
largest  IT  infrastructure  sup¬ 
port  organization  in  the  world 
and  craft  it  into  a  full-service 
company  like  IBM,”  he  said. 

As  part  of  that  strategy,  Roc¬ 
co  said,  look  for  HP  to  make 


targeted  acquisitions  in  areas 
where  the  company  needs  to 
quickly  build  capabilities. 

HP’s  unsuccessful  bids  last 
year  to  acquire  consulting  gi¬ 
ant  PricewaterhouseCoopers 
and  Comdisco  Inc.’s  disaster 
recovery  unit  are  indications 
of  the  company’s  strategy  in 
this  area,  Rocco  said. 

In  the  short  term,  HP’s  strat¬ 
egy  will  rely  on  taking  maxi¬ 
mum  advantage  of  its  com¬ 
bined  strengths  in  horizontal 
technology  segments  such  as 
Microsoft  Corp.’s  Exchange 
and  in  vertical  segments  such 
as  the  telecommunications  sec¬ 
tor,  said  Laurie  McCabe,  an  an¬ 
alyst  at  Summit  Strategies  Inc. 
in  Boston. 

“But  they  still  have  a  long 
way  to  go  on  the  consulting 
side  to  catch  up  with  an  IBM  or 
an  EDS,”  McCabe  said.  As  a  re¬ 
sult,  look  for  HP  to  rely  heavily 
on  channel  partners  to  deliver 
key  services  capabilities  while 
it  builds  its  own,  she  said,  i 


MORE  ON  THE  MERGER 

For  full  coverage  of  the  HP/Compaq 
merger,  visit  our  Web  site: 

QuickLink:  a1650 
www.computerworId.com 


HP  Mulls  Retreat 
From  Middleware 

HP  may  discontinue  some  of  its 
middleware  products  as  part  its 
postmerger  software  strategy. 

In  a  briefing  with  financial  an¬ 
alysts  in  Boston  last  week,  HP 
executive  Peter  Biackmore  said 
the  company  is  rethinking  its 
middleware  strategy  and  is  "con¬ 
sidering  retiring  some  assets  in 
that  space. 

Going  forward,  the  company 
will  depend  on  partnerships  with 
other  software  vendors  to  meet 
customer  requirements  in  this 
space,  he  said. 

An  HP  spokeswoman  said 
the  company  will  make  a  definite 
statement  regarding  its  middle¬ 
ware  plans  the  week  of  June  25. 
at  an  HP  event  in  Seattle. 

A  core  part  of  HP's  middle¬ 
ware  suite  is  its  Java  application 
server,  which  it  acquired  in  Octo¬ 
ber  2000  when  it  purchased 
Biuestone  Software  Inc.  HP  has 
made  the  software  available  as  a 
free  download  to  users  iri  addi¬ 
tion  to  bundling  it  along  with  its 
HP-UX  operating  system. 

-  Jaikumar  Vijayan 


Web  Services  Loom  Ahead  for  Travel  Firms 

Technology  eyed  for  online  bookings 


BY  JENNIFER  DlSABATINO 

NEW  YORK 

Today’s,  text-pager-toting  teen¬ 
agers  are  tomorrow’s  travel 
buyers,  and  the  industry  is 
building  an  IT  infrastructure 
for  that  future. 

Web  services  will  become  an 
important  distribution  channel 
for  travel  companies,  accord¬ 
ing  to  several  IT  executives 
who  attended  last  week’s  Trav¬ 
el  Commerce  Conference  & 
Expo  here.  But  it  will  be  a 
while  before  browsers  replace 
booking  agents,  they  said. 

“With  a  $5,000,  five-island 
Hawaii  trip,  people  just  aren’t 
closing  it  online,”  said  Andre 
Haroche,  CIO  at  Liberty  Travel 
Inc.  in  Ramsey,  N.J.  “Will  they 
do  it  30  years  from  now?  Yeah, 
they  will.  We’re  dabbling  in 


[Web  services]  in  the  right 
places,  so  when  it’s  mature, 
we’ll  go  with  it.” 

Conference  attendees  said 
that  to  survive,  online  travel 
sites  that  today  primarily  sell 
commodity  travel  services, 
such  as  economy  airline  seats, 
will  increasingly  sell  higher- 
yield  packaged  deals. 

That  will  require  the  cre¬ 
ation  of  standards-based  links 
between  suppliers,  so  travel 
agents  and  consumers  can  tie 
together  a  flight,  hotel,  car 
rental  and  even  snorkeling  ses¬ 
sions  while  retaining  business 
rules  and  customer  informa¬ 
tion  for  each  company. 

The  OpenTravel  Alliance 
Inc.  in  Alexandria,  Va.,  is  work¬ 
ing  on  XML  standards  specifi¬ 
cally  for  the  travel  industry. 


But  companies  say  they  can’t 
wait  until  the  organization’s 
standards  are  complete  before 
creating  online  business  rela¬ 
tionships  with  customers  and 
business  partners. 

Airlines,  car  rental  compa¬ 
nies,  hotel  chains  and  online 
travel  vendors  such  as  Expedia 


Why  Web  Services? 

Travel-based  Web  stan¬ 
dards  will  help  companies 

share  data  to  improve: 

■  Security,  by  creating  uni¬ 
form  identity  and  traveler 
profiles 

■  Customer  relationship 
management 

■  Personalization 

■A  la  carte  packaged  vaca¬ 
tions  from  multiple  suppliers 

■Yield  management 


Inc.  have  already  created  in¬ 
ventory  links.  For  example, 
Bellevue,  Wash.-based  Expedia 
provides  yield  management 
analysis  tools  to  customer  ho¬ 
tels  over  the  Web. 

In  1999,  Budget  Group  Inc.  in 
Lisle,  Ill.,  started  investing  in 
direct  links  to  partner  airlines 
and  corporate  customers 
through  Java-based  middle¬ 
ware,  said  Marylou  Johnson, 
the  company’s  vice  president 
of  IT  services. 

For  others,  the  demand,  isn’t 
there  yet.  Tom  Murphy,  CIO  at 
Royal  Caribbean  Cruises  Ltd. 
in  Miami,  said  that  only  about 
1%  of  his  company’s  sales  come 
from  its  Web  site. 

Both  Royal  Caribbean  and 
Liberty  Travel  are  building  in¬ 
frastructures  with  IBM  Global 
Services  to  create  Web  ser¬ 
vices  in  anticipation  of  the 
coming  demand,  but  Royal 
Caribbean  is  basing  its  system 
on  Java  and  Liberty  is  using 
.Net  from  Microsoft  Corp. 

Liberty  Travel  will  relaunch 


its  booking  engine  online  next 
month,  and  the  international 
travel  agency  is  developing 
middleware  that  translates 
data  stored  in  mainframe  sys¬ 
tems  so  agents  can  book  flights 
more  easily  and  efficiently. 

Liberty  Travel  already  hosts 
a  private-label  service  through 
its  Gogo  Worldwide  Vacations 
Inc.  division,  which  hosts  in¬ 
ventories  of  available  bookings 
for  other  travel  agencies  such 
as  Fort  Worth,  Texas-based 
Travelocity.com  Inc. 

But  Haroche  said  he  wants 
to  get  out  of  hosting  and  share 
the  inventories  over  the  Web. 
Hosting  is  difficult,  he  said, 
adding  that  he  would  rather 
create  a  standard  interface  so 
Liberty  Travel’s  customers  can 
access  the  different  travel  op¬ 
tions  themselves.  I 


LEGACY  LINKS 

Web  services  are  helping  travel  firms  link 
systems  that  couldn't  talk  before. 

QuickLink:  30410 
www.computerworld.com 


They're  asking  you  to  manage  a  business 


not  just  a  data  center.  Now  you're  concerned 
with  profitability.  Business  forecasting. 
They  even  want  recommendations  on 
system  performance  over  in  marketing. 

Is  your  current  software  up  to 
the  challenge? 

This,  of  course,  is  why  HP  has 
evolved  OpenView  software  from  a 
network  management  tool  into  a 
sophisticated  service  management 
solution  — covering  everything  from 
networks,  storage  and  systems  to 
services  like  ERP,  e-commerce  and  call 
center  management.  Basically,  the 
entire  infrastructure  on  which  your 
core  business  services  depend. 

So  in  addition  to  managing  your 
infrastructure,  HP  OpenView  now 
anticipates  and  resolves  problems 
according  to  your  organization's 
priorities  — by  department,  service, 
even  line  of  business. 

Increased  efficiency.  Lowered 
costs.  Higher  ROI.  Being  proactive 
with  recommendations.  That's  what's 
expected  of  you.  And  what  you  can 
expect  from  HP  OpenView  manage¬ 
ment  software. 

HP  infrastructure  solutions  are 
engineered  for  the  real  world  of 
business.  Because  the  last  time  we 
checked,  that's  where  we  all  work. 

To  learn  more  about  how  HP 
OpenView  Management  software 
can  help  run  your  business,  call 
1.800.HPASKME,  ext.  246.  Or  visit  us 
at  www.hp.com/go/infrastructure. 

Infrastructure:  it  starts  with  you. 
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Offshore 

As  a  result  of  the  escalating 
tensions,  CCC  has  had  discus¬ 
sions  with  Cognizant  about  the 
latter’s  backup  and  recovery 
schemes  and  its  ability  to  move 
people  to  locations  in  the  U.S., 
including  to  CCC’s  facilities  if 
need  be,  at  short  notice. 

“We  are  very  anxious  to 
maintain  our  relationship  with 
Cognizant,”  Beattie  said.  “But 
the  situation  in  India  has  cer¬ 
tainly  changed  the  risk  profile” 
associated  with  doing  projects 
there,  he  said. 

Baltimore-based  asset  man¬ 
agement  firm  T.  Rowe  Price 
Associates  Inc.  has  outsourced 
several  projects  to  Covansys 
Inc.  in  Farmington  Hills,  Mich. 
Covansys  does  work  for  T. 
Rowe  Price  in  facilities  in  both 
the  U.S.  and  India. 

Now,  T.  Rowe  Price  is  look¬ 
ing  at  how  much  it  will  cost  to 
conduct  some  of  the  work  in 
India  out  of  Covansys’  facilities 
in  the  U.S.  “In  the  worst-case 
scenario,  our  plan  is  to  use 
their  off-site  resources  [in  the 
U.S]  to  complete  our  offshore 
projects,”  said  Ram  Mouli,  vice 


president  of  technology  plan¬ 
ning  at  T.  Rowe  Price.  “We  are 
looking  at  how  the  rates  will  in¬ 
crease”  by  doing  that,  he  added. 

Kingsport,  Tenn.-based  East¬ 
man  Chemical  Co.  already  has 
contingency  plans  to  bring  off¬ 
shore  work  back  in-house,  if  it 
has  to,  said  Jerry  Hale,  vice 
president  and  CIO  of  the  firm. 

All  Talk  So  Far 

But  despite  the  clearly 
heightened  concern,  no  one  is 
talking  about  pulling  out  of 
projects  in  India  yet,  insisted 
executives  at  several  Indian 
software  companies. 

“People  are  more  keen  to 
understand  our  business  conti¬ 
nuity  and  disaster  recovery 
plans,”  said  Phaneesh  Murthy, 
a  vice  president  at  Infosys 
Technologies  Ltd.,  a  Bangalore, 
India-based  company  whose 
clients  include  Fidelity  Invest¬ 
ments,  Visa  International  Inc. 
and  J.C.  Penney  Co. 

“But  so  far  none  have  told  us 
of  any  change  in  their  plans; 
for  most,  its  business  as  usual,” 
said  Kumar  Mahadeva,  CEO  of 
Cognizant. 

That  concern  is  prompting  a 
flurry  of  activity  by  Indian 
vendors,  however,  which  are 
seeking  to  reassure  jittery  U.S. 


Contingency  Planning 

Tips  for  U.S.  companies  with  outsourcing  investments  in  India: 

DEVELOP  a  comprehensive  set  of  contingency  plans,  including  alternative 
telecommunications  paths  with  business  partners  and  the  ability  to  bring 
outsourced  work  in-house  or  transfer  it  to  another  third  party. 
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COMMUNICATE  frequently  with  business  partners  in  India  to  ensure  that 
they  are  taking  all  the  steps  needed  to  deliver  programming  and  other  ser¬ 
vices  to  your  organization. 
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CONDUCT  a  full  risk  analysis  of  doing  business  in  India  and  other  regions, 
including  an  overview  of  the  IT  infrastructures,  labor  pool,  political  climate, 
costs,  turnaround  time  and  ability  to  react  quickly  to  changing  events.  Weigh 
those  risks  against  the  costs  of  doing  business  in  India  and  elsewhere. 

ENSURE  that  source  code  remains  in  the  U.S.  and  that  business  partners  in 
India  are  able  to  access  the  code  while  maintaining  the  filters  to  secure  it. 
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DETERMINE  whether  contracts  allow  you  to  transfer  work  from  an  offshore 
project  to  another  location  or  back  in-house  without  severe  financial  penalties. 
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EVALUATE  other  potential  geographic  markets  to  outsource  work,  including 
the  U.S.,  Eastern  Europe,  Israel,  Ireland,  China,  Singapore,  Russia,  Mexico 
and  Puerto  Rico. 


clients  about  fallback  plans  in 
case  of  an  all-out  war.  Many, 
such  as  Cognizant,  have  drawn 
up  elaborate  contingency  plans 
for  their  customers,  outlining 
specific  steps  that  will  be  taken 
to  quickly  move  people  and 
processes  to  safe  locations  if 
war  breaks  out. 

India’s  largest  software 
house,  Mumbai-based  Tata 
Consultancy  Services,  has  been 


stashing  away  a  large  number 
of  visas  that  it  can  use  to  send 
programmers  to  Europe  or 
North  American  facilities  in 
“the  blink  of  an  eye,”  said  Jim 
Thomas,  a  vice  president  at 
Tata’s  Dallas  office. 

Others,  such  as  Covansys,  are 
accelerating  plans  to  ramp  up 
capacity  in  the  U.S  to  handle 
work  now  being  handled  in  In¬ 
dia,  if  that  becomes  necessary. 


India  is  one  of  the  most  pop¬ 
ular  destinations  for  offshore 
software  development  work. 
Scores  of  U.S.  companies  have 
ongoing  projects  in  the  coun¬ 
try,  while  some,  such  as  Gener¬ 
al  Electric  Co.,  Target  Corp. 
and  Ford  Motor  Co.,  have  full- 
fledged  software  development 
centers. 

Currently,  about  185  Fortune 
500  companies  and  more  than 
220  Global  1,000  companies 
outsource  technical  services  to 
India,  according  to  India’s  Na¬ 
tional  Association  of  Software 
and  Service  Companies. 

Many  U.S  retailers  are  using 
Indian  programming  shops  for 
maintenance  work  on  custom¬ 
ized  software  packages.  And 
they’re  “thrilled  to  death”  with 
the  results,  said  Cathy  Hotka, 
vice  president  of  IT  at  the  Na¬ 
tional  Retail  Federation,  a  trade 
association  in  Washington. 

“Anything  that  impacts  their 
ability”  to  get  that  work  com¬ 
pleted  “will  have  a  ripple  effect 
throughout  their  IT  shops,” 
she  said.  I 


OFF-PUTTING  OFFSHORE 

The  threat  of  war  could  compromise  India’s 
long-term  future  as  an  offshore  IT  center. 

OQuickLink:  30398 
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Smart  Cards 

Moreover,  millions  more 
cards  will  be  offered  to  air¬ 
lines’  “registered  travelers”  — 
frequent  fliers  —  which  may 
help  speed  check-in  times.  The 
Transportation  Security  Ad¬ 
ministration  said  it  doesn’t 
have  a  cost  estimate. 

The  U.S.  Department  of  De¬ 
fense,  meanwhile,  is  in  the 
process  of  issuing  4.3  million 
secure  smart  cards  to  its  per¬ 
sonnel  at  a  rate  of  7,000  per 
day.  The  program  may  be  mir¬ 
rored  in  civilian  agencies,  with 
the  potential  deployment  of 
millions  more  cards,  federal 
officials  said. 

“There  is  a  tremendous 
amount  of  momentum  in  the 
system  toward  smart  cards,” 
Paul  Kurtz,  senior  director  for 
national  security  at  the  White 


Driving  Smart 

As  federal  agencies  begin  to 
embrace  smart  cards,  the 
question  of  using  smart 
cards  for  driver’s  licenses 
looms: 

STATES’ CHOICES:  So  far.  no 
state  is  using  smart  cards  as  a 
driver’s  licenses.  Instead,  cheaper 
alternatives  -  bar  codes  and 
magnetic  stripes  -  are  in  use. 

Eight  states  are  using  biometrics, 
including  fingerprints. 


CONGRESS’  ROLE:  A  bill  pend¬ 
ing  in  the  House  would  provide 
states  with  S315  million  to  put  bio¬ 
metric  markers  on  an  encrypted 
chip.  No  action  is  expected  to  be 
taken  this  year. 

House’s  Office  of  Cyberspace 
Security,  said  at  a  Smart  Card 
Alliance  forum  last  week. 
Smart  cards,  if  properly  de¬ 
ployed,  provide  an  excellent 


means  of  security,  he  said. 

The  sheer  volume  of  federal 
demand  “will  fuel  the  indus¬ 
try,”  said  Randy  Vanderhoof, 
CEO  of  the  Princeton  Junction 
N.J.-based  Smart  Card  Alliance 
Inc.,  an  educational  and  advo¬ 
cacy  group  made  up  of  ven¬ 
dors  and  end  users.  Federal 
purchasing  will  bring  in  more 
vendors  and  drive  down  infra¬ 
structure  costs,  he  said. 

Moreover,  the  federal  push 
could  improve  card  interoper¬ 
ability.  Smart-card  vendors 
must  adhere  to  interoperabili¬ 
ty  standards  set  by  the  gov¬ 
ernment  in  order  to  get  that 
business. 

“We  don’t  want  to  be  tied  to 
a  single  vendor,”  said  Mary 
Dixon,  director  of  the  Penta¬ 
gon’s  smart-card  effort.  “We 
wanted  to  be  able  to  use  any¬ 
body’s  card,  anybody’s  readers, 
anybody’s  middleware.” 

But  it’s  by  no  means  certain 
that  lower  equipment  costs 


and  improved  interoperability 
would  make  biometric  smart 
cards  attractive  to  businesses. 
Only  about  1%  of  U.S.  compa¬ 
nies  use  secure  smart  cards, 
according  to  the  Smart  Card 
Alliance. 

Awaiting  Impetus 

Private-sector  use  is  “all 
about  the  value  that  people 
perceive  in  the  product,”  said 
Jeff  Staples,  an  Aldie,  Va.-based 
smart-card  consultant.  It’s  dif¬ 
ficult  for  the  private  sector  “to 
place  a  premium  on  that  secu¬ 
rity  unless  they  have  a  real  or 
immediate  threat,”  he  said. 

In  its  most  recent  figures  for 
2000,  IDC  in  Framingham, 
Mass.,  reported  enterprise 
smart-card  spending  of  only 
about  $46  million.  With  the 
decline  in  IT  spending  last 
year,  IDC  isn’t  expecting  big 
growth  in  those  2001  num¬ 
bers,  said  IDC  analyst  Charles 
Kolodgy.  Private-sector  bene¬ 


fits  will  depend  on  the  speed  of 
the  federal  rollout,  he  said. 

The  cost  of  smart  cards  can 
vary  considerably.  The  Defense 
Department  is  spending  about 
$40  per  card,  a  figure  that  in¬ 
cludes  infrastructure.  Industry 
experts  say  the  per-seat  cost 
can  reach  $200,  depending  on 
software,  biometrics,  depth  of 
systems  integration  and  card¬ 
monitoring  ability. 

The  Transportation  Security 
Administration  plans  to  begin 
pilot  testing  its  Java-based, 
32KB  smart-card  system  possi¬ 
bly  by  late  summer  at  several 
major  airports  and  seaports,  an 
agency  official  said.  A  finger¬ 
print  is  expected  to  serve  as 
the  biometric  identifier.  I 


NADER  VS.  MICROSOFT 

Adoption  of  smart  cards  isn't  the  only  way 
the  government  can  influence  private- 
sector  IT.  To  learn  more,  visit  our  Web  site: 

QuickLink:  30404 
www.computerworld.com 


It’s  not  about  whether  you’re 

connected  or  how,  but  to  what 


degree 


Welcome  to  one 


Welcome  to  business  with  .NET.  Another  day  of  business 
means  another  day  of  relentless  change.  As  an  IT  professional, 
you’re  charged  with  connecting  your  systems,  applications, 
and  people  in  a  way  that  delivers  the  flexibility  and  agility 
your  enterprise  needs  to  meet  the  pace  and  scaie  of  change. 
At  the  same  time,  you’re  expected  to  do  more  with  less. 

Yet,  most  applications  and  databases  don’t  talk  to  each 
other  and  your  data  sits  locked  in  rigid,  proprietary  systems. 


What  you  need  is  a  way  to  extend  your  infrastructure 
that  can  compress  the  time  and  space  between  people  and 
information,  leaving  just  one  degree  of  separation.  That’s 
business  with  .NET  connected  software  from  Microsoft. 


Microsoft  is  a  member  of  the  Web  Services  Interoperability 
Organization,  an  open  industry  effort  to  promote  Web  services 
interoperability  across  platforms,  applications,  and  programming 
languages.  To  learn  more  about  WS-I,  its  mem¬ 
bers,  and  its  implementation  tools,  visit  ws-i.org 


WSH 


degree  of  separation 


XML  Web  services  will  take  you  there.  The  next 
evolution  of  business  on  the  Web  is  here.  XML  Web  services 
offer  programmable  and  reusable  technologies  that  leverage 
the  flexibility  of  the  Internet.  Now  you  can  have  constellations 
of  connected  applications  running  on  multiple  platforms 
delivering  information  to  all  your  customers,  businesses,  and 
employees.  And  the  best  way  to  build  and  deploy  XML  Web 
services  is  with  .NET  connected  software  from  Microsoft. 

.NET  connected  software  ties  it  all  together. 

XML  Web  services  are  based  on  a  set  of  common  open 
standards  including  XML,  SOAP,  WSDL,  and  UDDI,  as  defined 
by  the  World  Wide  Web  Consortium  (W3C).  Working  with 
Microsoft1  .NET  connected  software  means  using  industry- 
standard  protocols  that  unify  your  legacy  code,  systems,  and 
applications  and  unlock  their  value.  Finally,  your  enterprise 
can  act  as  a  single  interoperable  whole. 

Delivering  a  clear  path  from  code  to  client. 

Many  promise  a  path  to  XML  Web  services,  but  only  .NET 


connected  software  from  Microsoft  offers  you  a  complete 
set  of  tools,  servers,  and  applications  for  transforming  your 
business  using  your  existing  infrastructure.  One  software 
solution  takes  you  all  the  way  from  code  to  client. 

“If  one  word  best  represents  the  past  year's  most  significant  news 
story  in  software  development,  it  would  be  .NET.  If  you  were  to 
look  for  two  words,  they  would  be  Web  services.'” 

-SD  Times,  “Web  Services,  .NET Highlight 2001." Alan Zeichick,  1/1/2002 


All  you  need  to  create  and  use  XML  Web  services: 

•Microsoft  Visual  Studio® .NET  and  the  .NET 
Framework— the  tools  to  build  them 

•The  Microsoft  Windows®  Server  Family— the 
platform  on  which  to  run  them 

•.NET  Enterprise  Servers— the  application  servers 
to  deploy  them 

•Microsoft  Office  XP  and  the  Office  XP  Toolkit— the 
applications  in  which  to  experience  them 


INFRASTRUCTURE  ^ 


pipe  dream  and  pipeline. 


Where  your  CEO’s  vision  meets  IT  reality,  it’s  one 
thing  to  map  out  the  future.  It’s  quite  another  to  unlock  the 
value  in  your  infrastructure  that  will  get  you  there.  Fortunately, 
XML  Web  services  built  with  .NET  connected  software  make 
it  a  lot  easier  to  connect  the  code  and  systems  you  already 
have  to  each  other— and  to  the  new  stuff  you  need. 

You  don't  rip  out  or  replace  legacy  systems.  But  you  do  bring 
new  capabilities  and  flexibility  to  your  existing  systems  that 
allow  you  to  leverage  your  investments  far  into  the  future. 

Your  code  and  systems  are  completely  connected. 

For  example,  rich  customer  data  may  currently  exist  in  multiple 
databases  and  applications,  requiring  your  sales  organization  to 
access  multiple  sources  to  build  an  account  profile.  By  using  XML 
Web  services,  you  can  unlock  that  data  and  make  it  available 
through  a  single  portal  targeting  multiple  clients,  such  as  laptops 
or  handheld  devices.  To  find  out  how  Microsoft  achieved  this  in 
100  days  for  its  own  sales  force,  visit  microsoft.com/enterprise 


How  Trans  World  Entertainment  cued  up  a  new  consumer 
brand  in  just  six  weeks.  Using  .NET  connected  software,  they 
are  connecting  their  650  FYE  retail  music  and  video  stores  in  46 
states;  25,000  in-store  listening  and  viewing  stations  to  servers 
housing  200,000  audio  tracks  and  10,000  movie  trailers;  and 
their  Web  customers  to  personalized  content  at  FYE.com. 


Data  Feed 


New  Apps 

XML  Web  services 


Product  Inventory  Data  Centers 

Catalog  System  .NET  Framework,  IIS  5.0 
Oracle  AS/400 

. J  1 


Customers  Retail  Stores 

Windows  XP,  CE  Windows  2000,  Windows  NT 


“.NET  has  enabled  us  to  achieve  widespread  brand  distribution 
across  a  broad  range  of  touch  points." 

—Mark  Hogan.  VP  of  Marketing.  Trans  World  Entertainment 


fences  and  freedom 


Your  isolated  data  becomes  shared  intelligence. 

Today,  much  of  your  data  sits  locked  away  in  proprietary 
systems.  .NET  connected  software  helps  you  open  the 
gate.  You  have  a  common  language  for  integrating  data 
and  applications,  so  information  flows  across  intranets  and 
extranets  to  those  who  need  it. 

“We've  already  seen  significant  incremental  revenues  and 
expect  the  trend  to  continue  as  we  leverage  the  .NET  platform 
to  strengthen  and  extend  our  business  mode /.” 

—Peter  Osbourne,  Group  Manager,  Advanced  Technology  Group,  Dollar  Rent  A  Car 

The  result  is  a  far  more  flexible  infrastructure  — one 
that  reduces  the  separation  between  the  elements  of  your 
business  to  just  one  degree.  By  connecting  your  customers, 
business  partners,  and  employees  directly  to  the  intelligence 
they  need,  you  streamline  operations  and  make  your  business 
more  agile,  responsive,  and  productive. 


INTEGRATION  ^ 


Connecting  your  data  to  your  customers.  .NET  connected 
software  lets  you  build  flexible,  seamless  connections  between 
your  back-end  data  and  front-end  systems.  This  allows  you  to 
close  the  loop  with  your  customers,  deliver  more  relevant  content, 
and  build  more  dynamic  relationships. 


Connecting  business  partners  to  you  and  to  each  other. 

.NET  connected  software  helps  you  first  integrate  your  own 
applications,  and  then  quickly  and  cost-effectively  integrate 
your  systems  with  those  of  your  business  partners,  vendors, 
and  suppliers. 


Connecting  your  employees  to  business  intelligence. 
.NET  connected  software  makes  it  much  easier  to  let  employees 
unlock  the  information  value  stored  in  your  infrastructure.  Not 
only  will  they  have  access,  they  can  also  begin  using  powerful 
analytical  tools  to  empower  themselves  and  others. 


►  ROYAL  CANADIAN  MINT 


Minicomputer 


BizTalk 

Server 


Solution:  Microsoft  Windows  2000  Advanced  Server  •  Microsoft  SQL 
Server™  2000  Enterprise  Edition  •  Microsoft  Commerce  Server  2000 
•  Microsoft  Content  Management  Server  2001  •  BizTalk  Server  2000 


^  DOLLAR  RENT  A  CAR 
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XML  Web  Services 
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Windows  2000 


VMS 


Solution:  Windows  2000  Server  •  Microsoft  Internet  Information 
Services  5.0  •  SQLServer  2000  •  BizTalk  Server  2000  •  VisualStudio.NET 
•  Microsoft  Mobile  Internet  Toolkit 


►  COMPUSA 


Solution:  Windows  2000  Advanced  Server  •  SQL  Server  2000  with 
Analysis  Services  •  ProClarity  reporting  client  for  store  managers  and 
corporate  staff  •  MATRA  Systems  solution  for  importing  data  from 
IBM  POS  systems  into  SQL  Server 


CUSTOMER  SOLUTIONS  ^ 


- _ 

How  Royal  Canadian  Mint  used  .NET  connected  software  to  create  new  revenue  streams.  Founded  in  1908, 
the  Royal  Canadian  Mint  was  looking  for  new  and  better  ways  to  reach  out  to  customers  for  its  evolving  catalog  of  precious 
metal  collector  coins  and  jewelry.  With  .NET  connected  software  they  were  able  to  create  a  next-generation  e-commerce  site  that 
delivered  dynamic  content  management,  personalization,  and  advanced  business  analytics  while  drawing  on  information  in  a 
legacy  database  and  feeding  orders  through  an  existing  ERP  system.  Microsoft  BizTalk®  Server  2000,  with  native  XML  support, 
integrated  the  data  seamlessly  for  smoother  transactions  and  more  efficient  order  processing.  To  see  a  webcast  on  redefining 
the  online  enterprise,  visit  microsoft.com/solutions/msib 


How  Dollar  Rent  A  Car  used  .NET  connected  software  to  drive  new  business  partnerships.  Dollar  Rent  A  Car 
is  a  world-leading  car  rental  agency,  with  a  fleet  of  75,000  cars  and  more  than  250  locations  across  26  countries.  They 
saw  that  integrating  their  VMS-based  reservation  system  directly  with  partners  would  drive  sales  and  reduce  the  cost  of 
transactions.  Using  .NET  connected  software  and  BizTalk  Server,  they  were  able  to  develop  an  XML-based  trading  partner 
integration  solution  in  weeks  rather  than  months— a  75  percent  reduction  in  development  time.  The  same  solution  also  helped 
Dollar  to  significantly  reduce  transaction  costs  with  its  partners.  To  get  a  resource  and  evaluation  kit  for  this  case  study,  go  to 
microsoft.com/business/casestudies/b2c/dollarrentacar.asp 


How  CompUSA  used  .NET  connected  software  to  accelerate  business  intelligence.  CompUSA  had  228 
retail  stores,  a  services  division,  corporate  sales,  and  a  training  division.  Moving  forward,  they  wanted  to  maximize  the 
value  of  customer  and  sales  data  stored  on  a  reporting  system  on  an  AS/400;  an  SAP  system  running  on  SQL  Server  2000; 
Oracle  databases;  and  several  custom  solutions.  Using  .NET  connected  software,  CompUSA  was  able  to  extract  their 
POS  data  and  consolidate  it  in  a  central  data  warehouse  where  it  can  be  analyzed  in  near-real  time.  So,  store  managers 
can  see  what  adjustments  are  needed  to  meet  opportunities  as  they  arise.  To  see  a  video  report  on  this  story,  go  to 
microsoft.com/SERVERS/evaluation/casestudies/compusa.asp 


solo  and  symphony, 


Call  on  over  1  million  partners  to  make  it  work. 

When  the  future  of  your  enterprise  is  at  stake,  it’s  good 
to  have  help.  Not  to  worry.  Work  with  Microsoft  .NET  con¬ 
nected  software  and  you’ll  be  accompanied  by  some  of  the 
world’s  leading  technology  consultants,  developers,  and 
services  organizations. 

You  can  develop  in-house,  or  work  with  Microsoft  Consulting 
Services.  And  once  you’ve  deployed  your  solutions,  Microsoft 
Premier  Support  can  help  you  maintain  them. 


Micioaoft  You  also  have  the  opt;ion  of  cal*'n§ on 

i  e  d  over  24,000  organizations  and  1  million 

Partner 

experts  trained  as  Microsoft  certified 
professionals  who  will  be  there  to  help  you  design,  build, 
deploy,  and  maintain  Microsoft-based  solutions  for  your 


SERVICES  &  PARTNERS  ^ 


enterprise.  With  so  much  support  behind  .NET,  you  have 
the  flexibility  of  choice.  No  matter  what  industry  you’re  in, 
there  are  qualified  partners  who  can  create  custom  solu¬ 
tions  that  fit  your  need  for  integration,  efficiency,  reliability, 
and  scalability. 

Whichever  route  you  choose,  Microsoft  offers  guidance 
in  the  form  of  standardized  methodologies  for  developing 
and  deploying  solutions.  To  learn  about  your  support  options, 
visit  microsoft.com/enterpriseservices 


Microsoft  has  alliances  with  the  largest  services  organiza¬ 
tions  in  the  world— including  Accenture,  Avanade,  Cap  Gemini 
Ernst  &  Young,  Compaq  Global  Services,  Dell,  EDS,  KPMG 
Consulting,  Unisys,  and  more— to  provide  Fortune  1000  companies 
with  complete  enterprise-class  solutions. 


between  you  and 
.NET  connected  software. 

With  Microsoft  .NET  connected  software,  you  can  close  the  gaps  in 
your  infrastructure,  leaving  only  one  degree  of  separation  between 
the  critical  aspects  of  your  business.  For  more  information  about 
the  tools  you  need  to  build  XML  Web  services,  the  servers  you  need 
to  deploy  them,  and  the  services  you  need  to  make  them  work,  visit 
microsoft.com/enterprise  Software  for  the  Agile  Business. 


Microsa 
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Clusters  Give  Users  Supercomputer  Power 


BY  JAIKUMAR  VIJAYAN 

Early  users  of  new  clustered 
systems  from  Dell  Computer 
Corp.  last  week  said  the  ven¬ 


dor’s  use  of  Intel-based  servers 
to  deliver  supercomputerlike 
performance  is  proving  to  be  a 
good  way  to  reduce  hardware 


costs  and  improve  scalability. 

Dell  announced  its  high-per¬ 
formance  computing  clusters 
technology  in  February.  The 


company  is  bundling  its  Power- 
Edge  servers  with  specialized 
clustering  and  message-pass¬ 
ing  software  from  MPI  Soft¬ 
ware  Technology  Inc.  in  Stark- 
ville,  Miss.,  and  Paralogic  Inc.  in 
Bethlehem,  Pa. 


r,  --■-'I  -\r  . 

■ 


Your  immediate  solution  to  securely  transfer 
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ever-increasing  data  and  save  money. 
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ASCENT  SOLUTIONS  Inc.,  developer  and  distributor  of: 


PKZIP  empowers  IT  professionals  by  providing  a  multi-purpose  tool  to  get  the  job  done  while  generating  real  cost  savings 
lor  the  organization.  As  a  dynamic,  cross-platform  solution,  PKZIP  uses  next  generation  X3rM  compression  and  encryption 
.  technology  to  max  imize  your  ROl.  Securely  and  quickly  send  mountains  of  data  in  a  fraction  of  the  time  it  takes  to  send 
•  currently  for  far  less  than  purchasing  additional,  expensive  bandwidth.  Best  of  all,  because  X3  technology  scales  with  your 
lization's  needs,  it  is  an  immediate  solution  to  securely  transfer  ever-increasing  data  and  save  money,  not  only  for  today, 
tomorrow  as  well. 

For  the  full  story  on  PKZIP  enterprise  solutions,  organizational 
cost  savings,  and  to  receive  a  FREE  gift*,  call  937.847.2374  or 
go  to  www.asizip.com  and  click  on  Get  the  Full  Story. 
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The  bundles  come  config¬ 
ured  with  16  to  128  processors 
and  can  be  tied  together  to  build 
very  large  systems  for  use 
in  scientific  research,  financial 
modeling  and  data-intensive 
business  applications. 

For  example,  Paris-based 
Compagnie  Generale  de  Geo¬ 
physique  (CGG)  used  Dell’s 
technology  to  build  a  3,072- 
processor  cluster  that  analyzes 
seismic  data  for  oil  companies. 

Derrick  Deaton,  an  execu¬ 
tive  vice  president  at  CGG’s 
Houston  office,  wouldn’t  dis¬ 
close  pricing  information.  But 
he  said  the  cluster  is  delivering 
performance  that’s  comparable 
to  the  throughput  of  special- 
purpose  supercomputers,  at 
roughly  a  quarter  of  the  cost. 

“The  fact  that  you  can  tie  so 
many  [servers]  together  so  in¬ 
expensively  allows  you  to  get 
generally  the  same  processing 
power,”  Deaton  said. 

That’s  why  Sandia  National 
Laboratories  in  Albuquerque, 
N.M.,  is  using  a  128-node  Dell 
cluster  to  try  to  simulate  the 
impact  of  nuclear  weapons. 

Examining  the  Advantages 

Apart  from  the  lower  costs, 
the  fact  that  such  clusters  can 
typically  be  built  and  put  into 
use  much  more  quickly  than 
traditional  supercomputers  is 
a  big  advantage,  said  Milt 
Clauser,  a  principal  member  of 
Sandia’s  technical  staff. 

But  Deaton  said  users  need 
to  be  aware  that  the  clusters 
can  occupy  considerably  more 
space  than  supercomputers  and 
generate  a  lot  of  heat. 

The  increasing  availability 
of  open-source  clustering  and 
parallel  computing  software 
and  the  growing  power  of  Intel 
Corp.  processors  are  making 
high-performance  clusters  in¬ 
creasingly  feasible,  said  Dan 
Kusnetzky,  an  analyst  at  Fram¬ 
ingham,  Mass.-based  IDC. 

IBM  offers  tools  that  help 
users  assemble  large  Intel- 
based  clusters,  Kusnetzky  said. 
And  Hewlett-Packard  Co.  plans 
to  harness  commodity  servers 
internally  to  offer  utilitylike 
computer  services  to  cus¬ 
tomers,  he  added.  But  thus  far, 
Dell  is  offering  the  most  formal 
program  for  building  the  clus¬ 
ters,  Kusnetzky  said.  ft 
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Sun  Moves  to  Open 
Up  Its  Portal  Software 

Will  tie  to  rival  app  server ;  OS  technology 


BRIEFS 


IBM  Plans  Charges 
Of  Up  to  $2.5B . . . 

IBM  said  it  plans  to  take  restructur¬ 
ing  charges  of  up  to  S2.5  billion, 
primarily  during  the  current  quarter. 
That  could  result  in  a  loss  for  IBM, 
which  reported  lower-than-expected 
results  for  the  first  quarter.  Among 
the  moves  announced  by  IBM  last 
week  was  a  layoff  of  1,500  workers 
at  its  microelectronics  unit,  which 
will  decrease  that  operation's  work¬ 
force  by  7.5%. 


. . .  And  Signs  Disk 
Deal  With  Hitachi 

IBM  and  Tokyo-based  Hitachi  Ltd. 
finalized  a  deal  under  which  Hitachi 
will  take  control  of  IBM’s  disk  drive 
operations.  Hitachi  will  pay  $2.05 
billion  for  a  70%  stake  in  a  new 
joint  venture  and  then  assume  full 
ownership  after  three  years,  the 
companies  said.  Talks  about  a  sepa¬ 
rate  deal  to  jointly  develop  storage 
systems  and  networking  technology 
are  continuing,  they  added. 


BY  MICHAEL  MEEHAN 

UN  MICROSYSTEMS 
Inc.  last  week  an¬ 
nounced  that  the  next 
version  of  its  portal 
server  software  will 
work  with  rival  application 
servers  and  support  operating 
systems  other  than  Solaris,  al¬ 
though  those  features  won’t  be 
in  the  initial  release. 

Part  of  the  strategy  behind 
the  portal  move  is  some  real- 
politick  marketing  by  Sun.  BEA 
Systems  Inc.  and  IBM  domi¬ 
nate  application  server  sales, 
and  each  had  a  34%  share  of 
that  market  last  year,  according 
to  a  report  released  in  March 
by  Cambridge,  Mass.-based 
Giga  Information  Group  Inc. 

“Pure  and  simple,  we  need  to 
sell  into  those  installed  bases,” 
said  John  Fanelli,  director  of 
product  marketing  for  Sun’s 


communications  and  portal 
products.  Links  to  the  applica¬ 
tion  servers  developed  by  IBM 
and  San  Jose-based  BEA  are 
due  to  be  added  to  the  upcom¬ 
ing  Sun  ONE  Portal  Server  6 
release  by  year’s  end  (see  box). 

Expansion  Strategy 

Sun’s  own  application  serv¬ 
er,  originally  part  of  its  iPlanet 
line  and  renamed  the  Sun  ONE 
Application  Server  in  April, 
was  a  distant  third  in  market 
share,  with  7%  last  year,  ac¬ 
cording  to  the  Giga  report. 

Sun  is  trying  to  boost  usage 
of  its  application  server  by 
bundling  the  software  with  its 
new  Solaris  9  operating  system 
[QuickLink:  30070].  But  Fanelli 
said  the  company  now  plans  to 
compete  in  the  software  mar¬ 
ket  on  a  product-by-product 
basis  instead  of  treating  the 


Sun  ONE  line  as  a  suite. 

Robert  Lerner,  an  analyst  at 
Current  Analysis  Inc.  in  Ster¬ 
ling,  Va.,  called  the  plan  a 
smart  move  on  Sun’s  part. 
“Customers  are  not  going  to  be 
locked  into  proprietary  solu¬ 
tions,  and  Sun  seems  to  be  get¬ 
ting  the  message,”  he  said. 

Giga  analyst  Laura  Ramos 
agreed  that  multiplatform  sup¬ 
port  is  a  necessary  step  for 
Sun,  at  least  in  the  portal  serv¬ 
er  business.  “It  will  certainly 
help  them  close  deals,”  she 
said.  “It’s  not  going  to  come  up 
as  a  disqualifier  anymore.” 

Sun  said  it  plans  to  make  the 
portal  server  available  on  Lin¬ 
ux  and  Windows  2000  next 
year.  The  software,  which  pro¬ 
vides  end  users  with  a  com¬ 
mon  Web-based  launching  pad 
for  different  applications,  now 
runs  only  on  Solaris. 

Other  new  features  include 
an  identity  server  that  will  let 
users  restrict  portal  access, 


Oracle  Trims  App 
Development  Staff 

Oracle  Corp.  disclosed  that  it  cut 
200  developers  from  its  business 
applications  unit,  reducing  the  com¬ 
pany’s  overall  development  staff  by 
about  2%.  The  layoffs  stemmed 
from  a  reorganization  announced  in 
March.  CEO  Larry  Ellison  said  sepa¬ 
rately  that  Oracle  expects  to  meet 
financial  expectations  for  its  fourth 
quarter  ended  May  31. 


Microsoft,  SEC  Settle 
Accounting  Charges 


Microsoft  Corp.  and  the  Securities 
and  Exchange  Commission  settled 
charges  that  the  company  violated 
accounting  rules  and  misstated  its 
profits  in  various  quarters  from 
1994  to  1998.  The  SEC  found  that 
Microsoft  committed  multiple  viola¬ 
tions,  but  the  company  wasn't  fined 
or  forced  to  restate  its  earnings. 


IBM  Beefs  Up  Database  Management  Line 


Rollout  includes 
self-managing  tools 

BY  MARC  L.  SONGINI 

IBM  last  week  announced 
plans  to  ship  20  new  or  up¬ 
graded  database  management 
tools  in  a  bid  to  bolster  its  com¬ 
petitive  position  in  that  mar¬ 
ket,  where  the  company  is  still 
a  relative  newcomer. 

Following  through  on  a 
promise  made  at  a  user  group 
conference  last  month  [Quick- 
Link:  29841],  IBM  detailed  a 
pair  of  self-managing  tools  for 
administering  the  Windows, 
Unix  and  Linux  versions  of  its 
DB2  database.  One  tool  ana¬ 
lyzes  DB2’s  performance  and 
recommends  tuning  changes, 
and  the  other  handles  database 
recovery  procedures. 


IBM  also  said  it’s  developing 
several  tools  that  will  support 
multiple  versions  of  DB2  as 
well  as  Informix  Dynamic 
Server  (IDS),  which  the  com¬ 
pany  bought  last  year  as  part 
of  its  acquisition  of  Informix 
Corp.’s  database  operations.  In 
addition,  IBM  is  rolling  out  15 


AT  A  GLANCE 


New  Toolbox 

SELF-MANAGING  UTILITIES:  Two 

products  for  automating  DB2  performance¬ 
tuning  and  database  recovery.  Both  are 
priced  at  $8,000  per  processor. 

MULTIPLATFORM  TOOLS:  Data  extrac¬ 
tion,  table  editing  and  Web-based  querying 
software  for  DB2  and  IDS.  Pricing  starts  at 
$3,500  per  processor. 

MAINFRAME  DB2:  New  products  include 
performance  management  and  SQL  query 
analysis  tools.  Capacity-based  prices  start 
at  $2,620  and  $1,310,  respectively. 


database  utilities  for  the  ver¬ 
sion  of  DB2  that  runs  on  its 
zSeries  mainframes  (see  box). 

IBM  entered  the  database 
tools  market  just  18  months 
ago,  but  it  now  offers  60  man¬ 
agement  products,  said  Jeff 
Jones,  director  of  strategy  for 
the  company’s  data  manage¬ 
ment  solutions  unit.  The  new 
tools  are  designed  to  make  it 
easier  for  database  administra¬ 
tors  to  work  with  DB2  and  re¬ 
duce  internal  costs,  he  noted. 

Wayne  Kernochan,  an  ana¬ 
lyst  at  Aberdeen  Group  Inc.  in 
Boston,  said  IBM  isn’t  blazing 
any  new  technology  paths  with 
the  products  it  highlighted  last 
week.  Rivals  such  as  Islandia, 
N.Y.-based  Computer  Associ¬ 
ates  International  Inc.  and 
Houston-based  BMC  Software 
Inc.  already  offer  similar  tools, 
Kernochan  said,  noting  that  CA 
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Sun's  Portal  Phases 


AUGUST:  General  release  of 

Sun  ONE  Porta!  Server  6  with 
identity  management  capabil¬ 
ities  and  other  features. 


DECEMBER;  Compatibility 
with  BEA’s  WebLogic  and 
IBM’s  WebSphere  application 
server  software  packages. 


FIRST  HALF  OF  2003:  Sup¬ 
port  for  running  the  portal 
software  on  Linux  and  Win¬ 
dows  2000  systems. 


along  with  Java  tools  that  main¬ 
tain  end-user  session  informa¬ 
tion  between  a  portal  and  vari¬ 
ous  application  and  Web  serv¬ 
ers  to  allow  single  sign-on  capa¬ 
bilities.  Web  services  support 
will  also  be  part  of  the  offering. 

Lerner  said  IBM  has  already 
added  multiplatform  support 
to  its  portal  software.  He  noted 
that  IBM,  BEA,  Sun  and,  to  a 
lesser  extent,  SAP  AG  have 
managed  to  muscle  into  the 
portal  market  at  the  expense 
of  smaller  vendors  that  focus 
solely  on  that  technology.  I 


Stacy  Cowley  of  the  IDG  News 
Service  contributed  to  this  story. 


has  been  working  on  automat¬ 
ing  its  database  management 
tools  for  the  past  several  years. 

However,  Kernochan  said 
that  IBM  has  done  a  good  job 
with  its  new  management  utili¬ 
ties.  IBM  had  no  choice  but  to 
offer  Informix  users  some 
database  tools  to  help  reassure 
them  of  the  long-term  viability 
of  the  IDS  software,  he  said. 

Joseph  Burns,  a  senior  data¬ 
base  consultant  at  insurer  High- 
mark  Inc.  in  Cranberry,  Pa., 
said  at  last  month’s  Interna¬ 
tional  DB2  Users  Group  con¬ 
ference  in  San  Diego  that  he 
thinks  IBM’s  database  tools  are 
now  competitive  with  rival  of¬ 
ferings  on  functionality. 

IBM  said  the  self-managing 
performance-tuning  tool  is 
scheduled  for  release  late  next 
month,  and  the  database  re¬ 
covery  product  will  follow  in 
September.  The  mainframe 
DB2  utilities  and  the  mixed 
tools  for  DB2  and  IDS  are  due 
before  the  end  of  next  month.  I 
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PATRICIA  KEEFE 


Trustworthy  IT 


RUST  HAS  BECOME  THE  RAREST  of 
virtues  these  days.  Even  the  briefest 
scan  of  recent  headlines  must  force  the 
conclusion  that  we  as  a  nation  are  se¬ 
verely  deficient  in  trust  right  now. 


Scandalous  corporate 
behavior  runs  rampant. 

So  much  so  that  one  re¬ 
cent  business  magazine 
cover  story  blared 
“Memo  to  CEOs:  Why 
nobody  trusts  you  any¬ 
more  and  what  you  can 
do  about  it.”  There’s  a  lot 
to  be  addressed.  There’s 
the  conjoined  Enron  and 
Arthur  Andersen  scan¬ 
dals,  which  devastated 
two  once-respected  com¬ 
panies,  sinking  the  careers  and  liveli¬ 
hoods  of  many  decent  people.  The 
Securities  and  Exchange  Commis¬ 
sion  has  probed  how  many  compa¬ 
nies  for  questionable  accounting 
practices  in  the  past  quarter?  It  just 
settled  with  Microsoft,  which  for 
some  is  the  poster  child  for  untrust¬ 
worthiness.  Also  under  the  micro¬ 
scope  are  numerous  brokers  and  in¬ 
vestment  bankers  who  allegedly  is¬ 
sued  biased  stock  ratings  about  dot¬ 
com  companies  that  they  were  pro¬ 
moting  or  courting.  Online  business¬ 
es  are  rewriting  their  privacy  poli¬ 
cies  at  the  expense  of  consumer 
rights,  undermining  talk  of  industry 
self-policing. 

On  a  national  level,  many  people 
have  lost  trust  in  government  as  the 
chorus  of  who  knew  what,  when  pri¬ 
or  to  9-11  grows  ever  more  strident. 

High-tech  has  hardly  been  im¬ 
mune.  Outsourcing  and  obtuse  li¬ 
censing  plans  have  IT  workers  and 
users  up  in  arms.  The  state  of  Cali¬ 
fornia’s  investigation  of  its  $95  mil¬ 
lion  contract  with  Oracle  has  al¬ 
legedly  caused  other  potential  cus¬ 
tomers  to  take  a  harder  look  at  the 
company  and  its  contracts. 

Closer  to  home,  corporate  IT  is 
wres’  'ing  with  its  own  trust  issues. 
Some  o.  anizations  are  still  recover- 
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ing  from  distrust  on  the 
business  side  created  af¬ 
ter  billions  were  spent  on 
Y2k  remediation,  and 
then  nothing  went 
wrong.  Budget  requests 
were  already  falling  un¬ 
der  greater  scrutiny 
when  the  recession 
kicked  in. 

Project  management  is 
another  critical  high- 
wire  act,  and  one  that 
many  IT  departments 
still  do  badly,  which  ruins  trust 
among  users.  Take  the  U.S.  Navy’s 
$6.9  billion  N/MCI  intranet  program 
[QuickLinks:  29843, 30073],  which  is 
reportedly  riddled  with  user  dissatis¬ 
faction.  Our  sources  have  blamed 
lack  of  planning,  mismanagement 
and  fierce  internal  resistance  to  the 
program. 

Users  are  the  ones  who  pay  the 
price  when  projects  go  awry.  But  IT 
also  loses.  A  recent  Pivia  white  pa¬ 
per  notes  that  external  customers 


vote  with  their  feet,  but  internal  cus¬ 
tomers  stick  around  and  express 
their  dissatisfaction  with  you  and 
your  managers. 

A  new  breed  of  project  managers 
is  rebelling  against  traditional 
process-heavy  methodologies  that 
can  isolate  people  and  foster  dis¬ 
trust.  Instead,  these  folks  are  using 
“extreme  project  management”  —  an 
iterative  approach  that  stresses  com¬ 
munication  and  collaboration.  Busi¬ 
ness  stakeholders  define  the  project, 
set  the  tone,  stay  involved  and  make 
the  decisions  from  beginning  to  end. 
If  the  project  is  going  to  be  late  or 
over  budget,  IT  people  and  business 
people  know  it  at  the  same  time. 
There’s  no  opportunity  to  hide  the 
truth,  so  trust  is  a  given. 

How’s  that  for  plain  old  common 
sense?  And  the  payoffs  are  tremen¬ 
dous  even  if,  and  especially  if,  the 
project  stumbles. 

An  investment  in  this  methodolo¬ 
gy  will  be  well  worth  the  effort. 

Trust  is  both  a  difficult  and  delicate 
matter.  It’s  tough  to  establish,  and 
you  can  lose  it  in  a  nanosecond.  It’s 
foolish  not  to  explore  any  avenue  to 
gaining  trust.  And  any  move  you 
make  in  that  direction  is  certain  to 
have  the  added  bonus  of  winning  IT 
respect  as  well.  I 
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PIMM  FOX 

ASP  Model  Is 
Alive  and  Well 

OUT  OF  THE  ASHES  of 
dot-com  rubble  good 
things  grow.  The 
“back-to-basics”  rush  charac¬ 
terized  by  IT  budgets  stuck  in 

neutral  belie  an  important  truth:  With¬ 
out  the  hype,  spending  and  dreaming 
about  the  Internet,  we’d  be  stuck  in  a 
client/server  world  without  efficient 
means  to  share  information.  A  good 
example  is  the  building  trade. 

In  halcyon  days,  Buzzsaw.com,  a 
venture-backed  San  Francisco-based 
start-up,  was  going  to  revolutionize  the 
way  buildings 
got  built.  The 
goal:  to  aggre¬ 
gate  the  design, 
construction 
and  develop¬ 
ment  of  real  es¬ 
tate  projects. 

Not  only  would 
architects  and 
construction 
managers  share 
drawings  and 
collaborate  on 
building  timeta¬ 
bles,  but  construction  catalogs  would 
also  be  available  via  a  Web  interface. 

Blueprints,  e-mail  threads,  project 
folders  and  schedules  were  to  be  host¬ 
ed  at  a  third-party  site,  setting  the 
stage  for  the  ASP  model. 

But  like  an  architect  trying  to  reach 
for  the  stars  before  the  foundation  has 
set,  Buzzsaw.com  tried  to  cut  through 
too  many  traditional  tasks  without 
having  all  the  pieces  in  place.  The 
company  displayed  the  traditional  dot¬ 
com  characteristics:  revolutionary 
thinking  without  regard  for  the  rich 
history  and  well-defined  practices  of 
the  profession. 

Autodesk  Inc.,  which  had  a  40%  stake 
in  Buzzsaw.com,  swallowed  the  entire 
company  and  its  ASP  model  last  July. 

But  now  the  future  has  caught  up 
with  the  dream. 

Architects  Skidmore,  Owings  & 
Merrill  LLP  use  Autodesk’s  Buzzsaw 
service  to  share  drawings  originally 
created  in  CAD  applications.  People  in 
different  offices  mark  up  drawings, 

For  more  columnists  and  links  to  archives  of  previous 
columns,  go  to 

Q  computerworld.com/columns 
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check  project  changes  and  send  up¬ 
dates  to  team  members  without  resort¬ 
ing  to  FedEx  tubes,  faxes  or  copy  ma¬ 
chines.  There’s  even  a  digital  camera  at 
a  work  site  that  transmits  pictures  to 
an  enterprise  portal,  so  people  can 
check  construction  progress. 

Project  managers  don’t  wait  a  day 
for  drawings,  and  there’s  less  confu¬ 
sion  about  who’s  supposed  to  sign  off 
on  changes.  Just  as  similar  project 
management  software  helps  enterpris¬ 
es  streamline  the  chain  of  responsibili¬ 
ty,  using  the  ASP  model  for  the  build¬ 
ing  industry  cuts  out  a  whole  layer  of 
indecision  and  downtime. 

But  there  remains  a  telling  gap  in  the 
process.  Municipal  governments  still 
don’t  work  in  the  digital  world  when  it 
comes  to  approving  building  designs 
and  changes.  The  reason  most  often 
cited  is  that  the  building  industry  has¬ 
n’t  adopted  this  Web-based  environ¬ 
ment  in  the  critical  mass  necessary  to 
force  government’s  hand. 

But  this  will  change  as  large  devel¬ 
opers  such  as  Walt  Disney  use  collabo¬ 
rative  ASP  technology  to  keep  track  of 
what  is  happening  on-site  as  well  as  in 
the  architect’s  office. 

The  dream  was  real.  The  Internet 
radicals  just  didn’t  give  themselves 
enough  time.  I 


DAVID  MOSCHELLA 


U.S.-Europe 
Rifts  May 
Spill  Into  IT 


During  president 
Bush’s  recent  trip  to 
Europe,  it  was  hard  to 
ignore  the  many  rifts  that 
seem  to  have  opened  between 


the  U.S.  and  its  most  important  politi¬ 
cal  and  economic  allies.  While  dis¬ 
agreements  with  our  friends  in  Europe 
are  certainly  not  new,  it’s  now  becom¬ 
ing  increasingly  likely  that  some  of  to¬ 
day’s  antagonism  will  spill  over  into  IT 
and  Internet  public  policy  issues.  In¬ 
deed,  serious  IT  policy  disputes  seem 
almost  inevitable. 

The  nature  of  the  divide  has  become 
entirely  too  familiar.  Much  of  the  Euro¬ 
pean  elite  routinely  characterizes  the 
U.S.  as  arrogant,  unilateralist,  rash  and 
unsophisticated.  These  criticisms  tend 
to  become  particularly  shrill  whenever 
a  Republican  is  in  the  White  House.  In 
contrast,  many  Americans  believe  that 
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the  European  emphasis  on 
multilateral  institutions  and 
the  complexities  of  culture 
and  history  is  often  really 
just  an  excuse  for  doing 
nothing,  while  having  lots  of 
long  lunches  in  Geneva. 

These  basic  cultural 
stereotypes  would  be  amus¬ 
ingly  irrelevant  were  it  not 
for  the  fact  that  coordinated 
public  policy  is  becoming  an 
increasingly  important  IT  in¬ 
dustry  factor.  Major  differ¬ 
ences  in  regional  policies,  particularly 
in  Internet-related  areas,  could  easily 
become  a  serious  barrier  to  global 
progress  in  technology.  Consider  the 
following  three  areas  where  the  U.S. 
and  Europe  seem  destined  to  disagree: 

Online  privacy.  The  European  Union 
recently  deemed  the  U.S.  financial  in¬ 
dustry’s  “opt-out”  privacy  rules  inade¬ 
quate  and  not  in  compliance  with  the 
EU’s  “opt-in”  requirements.  The  EU  is 
also  investigating  whether  Microsoft’s 
Passport  Web  authentication  service 
violates  European  privacy  law.  Other 


potential  areas  of  privacy 
policy  disputes  include 
spam,  data  retention  re¬ 
quirements  and  cookies. 

Internet  taxation.  While 
Congress  has  consistently 
supported  a  moratorium  on 
Internet  sales  taxes,  the  EU 
has  decided  otherwise.  Ef¬ 
fective  July  1,  2003,  value- 
added  taxes  (VAT)  will  be 
applied  to  goods  down¬ 
loaded  over  the  Internet,  in¬ 
cluding  software,  music  and 
videos  from  U.S.-based  companies.  The 
Bush  administration  has  complained 
and  will  likely  raise  the  issue  with  both 
the  Organisation  for  Economic  Co-op¬ 
eration  and  Development  and  the 
World  Trade  Organization.  In  Europe, 
national  VATs  tend  to  add  15%  to  25%  to 
the  prices  of  goods  and  services. 

Antitrust  law.  The  wake-up  call  here 
came  last  June,  when,  for  the  first  time, 
the  EU  rejected  the  proposed  acquisi¬ 
tion  of  Honeywell  by  General  Electric, 
two  U.S.  companies.  All  signs  suggest 
that  the  EU  will  also  likely  have  its  own 


view  of  the  Microsoft  antitrust  situa¬ 
tion.  While  U.S.  courts  have  generally 
blessed  Microsoft’s  software  bundling, 
the  EU  is  considering  a  requirement 
that  the  Windows  Media  Player  be  sep¬ 
arated  from  Windows  itself. 

Copyrights,  patents,  spectrum  allo¬ 
cation  and  global  positioning  systems 
are  other  areas  of  potential  future  dis¬ 
agreement.  What  makes  these  disputes 
so  volatile  are  the  different  IT  situa¬ 
tions  on  each  side  of  the  Atlantic.  In 
many  market  segments,  U.S.  IT  compa¬ 
nies  are  often  much  stronger  than  their 
European  rivals,  so  the  EU  often  has  a 
relatively  free  hand  to  act.  Certainly, 
few  tears  will  be  shed  in  Europe  for 
any  EU  decisions  that  adversely  affect 
U.S.  firms.  Even  more  worrisome,  it’s 
often  the  stricter  Internet  policy  that 
eventually  prevails,  since  it’s  difficult 
to  have  one  set  of  rules  in  Europe  and 
another  in  the  U.S.  If  this  pattern  holds 
true,  much  of  the  IT  industry’s  future 
will  be  determined  in  Brussels.  Ouch! 

So,  bridging  the  current  cultural  di¬ 
vide  may  be  more  important  than 
many  of  us  realize.  I 
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Figuring  ITAA's  Numbers 

HANK  you,  Patricia 
Keefe,  for  seeing 
what  we  techies  have 
said  all  along:  There  is  no 
shortage  of  programmers 
[QuickLink:  29632].  In  the 
past,  if  someone  had  most  of 
the  skills  needed,  he  could 
get  hired,  but  nowadays,  you 
have  to  have  exactly  what’s 
on  the  spec  sheet.  HR  man¬ 
agers  are  looking  for  all  of 
the  skills,  when  the  person 
can  function  with  most  of 
the  skills.  You  write  for 
Computerworld.  Does  that 
mean  you  don’t  know  how 
to  write  for  Hot  Rod  maga¬ 
zine?  You’re  a  reporter  — 
the  skill  is  there.  You  would 
just  have  to  brush  up  on 
what  you’re  writing  about. 
G.H.  Nelson 
Birmingham,  Ala. 

IT’S  IRONIC  that  this  year 
the  ITAA  lowered  its  es¬ 
timate  of  new  jobs  to 
1.1  million.  Last  year,  it  esti¬ 
mated  1.6  million  new  IT 
jobs,  yet  we  actually  lost 
500,000.  That  is  an  error  of 
2.1  million.  Does  this  mean 


we  will  lose  1  million  jobs 
this  year?  I  think  the  ITAA  is 
like  a  weatherman  who  con¬ 
tinually  forecasts  rain.  Un¬ 
der  further  investigation, 
you  will  find  that  he  is  spon¬ 
sored  by  the  umbrella  manu¬ 
facturers’  lobby  and  that  the 
ITAA  is  sponsored  by  indus¬ 
try  groups  that  want  to  bring 
more  H-lBs  into  the  U.S.  to 
lower  IT  salaries. 

M.  Powell 

Huntington  Beach,  Calif. 


Figuring  ROI  Numbers 

I  was  glad  to  see  the  ar¬ 
ticle  “The  Fuzzier  Side  of 
ROI”  [QuickLink:  29281]. 
The  drive  to  provide  ROI 
numbers,  based  on  fuzzy 
numbers  and  fuzzy  logic,  is 
part  of  the  overall  trend  to 
evade  responsibility  for  any 
downside  of  any  decision. 
Investment  in  technology 
has  two  features.  One  is  a  re¬ 
turn  horizon  that’s  longer 
than  the  technology  horizon, 
which  defies  sound  ROI 
(usually  applied  to  projects 
having  returns  within  two 
years).  The  other  is  the  re¬ 
turn  to  brand  and  customer 


perception  going  forward, 
which  is  inherently  fuzzy. 

CEOs  make  bold  decisions 
about  their  products  and  ser¬ 
vices  based  on  their  market¬ 
place  knowledge  and  strate¬ 
gic  expertise.  Few  of  these 
have  a  sound  ROI  associated 
with  them.  Suddenly,  when 
technology  comes  into  the 
picture,  it’s  scary  voodoo. 

Driving  the  demand  for 
ROI  is  the  difficulty  many 
technology  company  CEOs 
have  making  bold  decisions, 
since  they  lack  marketplace 
knowledge.  There  are  three 
ways  to  explain  it:  shirking, 
cowardice  or  incompetence. 
All  are  ugly  words,  and  easy 
to  confuse  with  simply  being 
wrong,  which  we  all  are 
from  time  to  time. 

David  Eaves,  CEO 
Internet  Security  Corp. 

Foster  City,  Calif. 

OUR  TECHNOLOGY 

consultancy  recently 
conducted  a  survey 
on  the  productivity  of  IT  de¬ 
partments  for  100  companies 
in  the  U.S.  and  abroad  and 
came  up  with  an  interesting 
revelation:  Almost  all  of 


them  stated  that  IT  is  a  “util¬ 
ity”  organization,  like  water, 
gas  or  electricity.  IT  has  a 
specific  goal,  to  support 
business.  It’s  not  a  profit 
center,  but  it’s  not  a  cost 
center  either.  It’s  an  essen¬ 
tial  requirement  to  conduct 
business.  The  success  or 
failure  of  IT  depends  on 
how  well  senior  manage¬ 
ment  values  information. 
ROI  isn’t  a  relevant  metric 
these  days.  Senior  manage¬ 
ment  and  CIOs  should  stop 
playing  Wall  Street. 

Rocky  Termanini 
Managing  director 
International  Consulting  Group 
Cheshire,  Conn. 
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The  next  generation  of  hp  ProLiant  technologies: 

A  better  way  to  make  your  business  move  faster. 

Today's  I.T.  infrastructure  eats  up  a  lot  of  things:  People.  Money.  Time.  But 
those  vital  resources  can  all  be  maximized  with  an  infrastructure  that  adapts 
more  quickly  to  change.  And  ProLiant  server  technologies  can  make  that 
adaptive  infrastructure  a  reality. 

The  next  generation  of  ultra-dense  ProLiant  BL  Series  servers  with  Intel® 
Pentium®  III  processors  makes  deployment  a  simple  matter  of  unpacking, 
plugging  in,  and  clicking  a  mouse.  So  it  happens  in  minutes,  instead  of  tying 
up  your  key  people  for  days.  And  with  ProLiant  Essentials  Rapid  Deployment 
software,  an  O/S  or  application  upgrade  can  now  be  downloaded  to  all 
servers  companywide  by  one  person.  It's  faster,  more  flexible  technology  that 
will  speed  up  your  whole  business.  Our  people  can  show  you  how. 


For  more  information  and  a  White  Paper, 
call  1-800-282-6672,  press  5  and  mention 
code  TGU  or  visit  www.hp.com/solutions/ai 
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IT  POWER  PLAY  AT 
CALIFORNIA  UTILITIES 

Investor-owned  energy  companies 
in  the  Golden  State  are  turning  to 
IT  to  re-energize  an  industry 
known  more  recently  for  sky-high 
prices  and  rolling  blackouts  than 
for  good  customer  service  or 
promising  profits.  PAGE  24 

CSO:  LOFTY  TITLE, 

BUT  LITTLE  POWER 

Chief  security  officers  may  have  a 
chief-level  title,  but  they  have  little 
to  show  for  it.  Corporate  politics, 
small  staffs  and  growing  friction 
between  security  chiefs  and  CIOs 
top  the  list  of  factors  that  render 
many  CSOs  ineffective.  PAGE  28 

LET'S  MAKE  AN 
OUTSOURCING  DEAL 

A  tough  economy  and  tight  IT  bud¬ 
gets  are  driving  more  users  and 
vendors  to  the  bargaining  table, 
where  fixed  contracts  are  being 
shoved  aside  in  favor  of  incentive- 
based  pricing  models.  PAGE  30 

| 

A  Buyer’s  Market 

Here’s  what  the  tough  economic 
climate  has  done  to  the  going  hourly 
rate  for  project  managers  who  work 
for  outsourcing  companies: 


SPRING  2000  SPRING  2002 


$110  to  $135  $85  to  $110 

SOURCE:  DIGERATI  SOLUTIONS  LLC.  BABYLON,  N  Y 


CAREER  ADVISER 

Fran  Quittel  offers  advice  to  a  net¬ 
working  manager  who  wants  to 
know  what’s  in  a  title  and  to  an  IT 
worker  whose  company  has  de¬ 
layed  salary  reviews  but  is  offering 
stock  options  instead.  PAGE  39 


BUSINESS 

BART  PERKINS 

Discipline  by  Design 

POOR  BUYING  DECISIONS  cost  your  company  more  than  money. 

The  size  of  your  IT  supplier  portfolio  demands  that  buying  deci¬ 
sions  be  made  as  part  of  a  disciplined  enterprisewide  process, 
guided  by  your  IT  architecture.  Without  that,  countless  uncoor¬ 
dinated  buying  decisions  will  create  an  infrastructure  that’s 
overly  complex  and  too  complicated  to  function  effectively. 


In  addition,  infrastructure  complexity  requires 
many  wrappers  and  black  boxes  to  enable  communi¬ 
cation  among  the  various  systems  and  databases. 

One  new  CIO,  for  instance,  found  56  general 
ledgers  in  14  data  centers  on  24  mainframe/midrange 
platforms.  Another  IT  executive  at  the  company  de¬ 
scribed  what  had  happened  this  way:  “We  built  this 
one  good  decision  at  a  time.”  While  each  buying  de¬ 
cision  was  good  in  isolation,  the  overall  result  was  a 
disaster. 

For  most  companies,  the  architectures  the  IT  staff 
designed  to  meet  strategic  imperatives  are  not  the  ar¬ 
chitectures  their  procurement  processes  are  buying. 
Uncontrolled  buying  decisions  sabotage  the  best  ef¬ 
forts  to  deliver  a  specified  architecture  for  the  fol¬ 
lowing  reasons: 

■  There’s  no  defined  process  to  coordinate  thou¬ 
sands  of  buying  decisions  across  the  enterprise. 

■  The  architecture  and  associated  standards  are 
rarely  detailed  enough  to  guide  buying  decisions. 
They  don’t  identify  a  specific  product  to  be  acquired 
or  describe  the  trade-offs  of  using  alternatives. 

■  Underscrutinized  products  are  frequently  ac¬ 
quired  for  high-priority  projects  in  order  to  meet 
non-negotiable  deadlines. 

■  Maverick  buyers  in  IT  and  the  rest  of 
the  business  may  contend  that  a  weak 
process  gives  them  the  freedom  to  circum¬ 
vent  architectural  guidelines  and  acquire 
technology  from  a  favored  vendor. 

The  buying  process  requires  structure 
and  discipline,  much  as  development  ef¬ 
forts  require  a  systems  development  meth¬ 
odology.  A  buying-decision  process  estab¬ 
lishes  a  framework  to  coordinate  acquisi¬ 
tions  across  the  enterprise.  It  relies  on  ex¬ 
plicit  architectural  guidelines  and  requires 
that  all  buying  decisions  be  checked 
against  them.  It  defines  consistent  deliver¬ 
ables  (such  as  standard  contract  terms  and 
conditions)  and  requires  stakeholder  par¬ 
ticipation. 

This  process  unifies  the  IT  architecture 


and  its  underlying  infrastructure  and  provides  the 
only  effective  screen  to  block  products  and  services 
that  don’t  adhere  to  your  architecture. 

To  make  your  buying-decision  process  successful, 
you’ll  need  to  do  the  following: 

■  Sell  the  importance  of  buying  well  to  the  organization.  IT 
and  the  rest  of  the  business  often  focus  on  creating 
the  next  application.  You  must  remind  executives 
that  most  of  the  applications  will  be  purchased  rather 
than  developed  in-house.  Buying  decisions  have  be¬ 
come  a  significant  part  of  the  development  process. 

■  Get  support  from  all  CXOs.  A  buying-decision  process 
can  be  successful  only  if  enforced  consistently  across 
the  enterprise. 

■  Get  the  CIO  to  control  the  process.  Nobody  is  better 
positioned  to  view  the  IT  architecture  and  its  impact 
on  the  business.  The  CIO  has  ultimate  responsibility 
for  ensuring  that  buying  decisions  support  the  archi¬ 
tecture. 

■  Create  a  centralized  team  to  manage  the  buying  process 
and  assist  those  making  decisions.  This  team,  typically 
made  up  of  IT  staff,  may  include  representatives 
from  other  divisions,  such  as  purchasing  or  legal. 

■  Provide  economic  incentives.  Most  buyers  will  help  if 
there’s  something  in  it  for  them,  such  as 
cost  savings.  For  example,  buyers  purchas¬ 
ing  a  desktop  office  suite  in  a  separate  busi¬ 
ness  unit  will  care  far  more  about  conform¬ 
ing  to  the  corporate  architecture  if  it  en¬ 
ables  them  to  buy  that  suite  at  a  lower  cost 
per  seat. 

Your  infrastructure  is  the  direct  result  of 
your  buying  decisions. 

Without  a  consistent  buying  process, 
these  decisions  will  be  made  without  the 
necessary  architectural  guidance.  You’ll  ac¬ 
quire  applications,  technologies  and  ser¬ 
vices  that  you  never  intended  and  some  that 
you  really  shouldn’t  own. 

If  you  consistently  buy  well,  you’ll  have  a 
chance  to  realize  the  architecture  you  de¬ 
signed.  Buy  unconsciously,  and  you’ll  get 
the  architecture  you  deserve.  I 
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Now  that  the  energy  crisis  has  eased, 
the  state’s  three  investor-owned 
utilities  are  pushing  ahead  with  big  IT 
projects  to  secure  their  own  futures. 
By  Melissa  Solomon 


IT  AIN’T  over  yet.  The  lights  are 
back  on  and  prices  have  stabi¬ 
lized,  but  political  and  regulatory 
hurdles  are  still  fueling  the  fires 
in  California’s  energy  industry. 

At  issue  are  details  that  could  dra¬ 
matically  alter  the  way  the  industry  is 
structured,  including  the  reorganiza¬ 
tion  of  Pacific  Gas  &  Electric  Co. 
(PG&E),  the  design  of  the  state’s  pow¬ 
er  market  grid  and  an  uncomfortably 
modest  energy  reserve. 


“Don’t  let  me  lull  you  into  the  idea 
that  we  still  aren’t  tight  on  supply  in 
California,”  says  Terry  Winter,  president 
and  CEO  of  the  California  Independent 
System  Operator  (ISO),  which  controls 
the  state’s  power  grid.  “We  are.” 

But  through  it  all,  the  state’s  three 
investor-owned  utilities  are  trying  to 
press  on  with  business  as  usual  and  plan 
for  life  after  the  crisis.  And  IT  plays  a 
key  role  in  each  company’s  plans. 

Southern  California  Edison  (SCE)  is 


on  a  full-scale  mission  to  simplify  its 
IT  infrastructure  while  exploring 
emerging  technologies  such  as  mobile 
field  service  systems.  San  Diego  Gas  & 
Electric  (SDG&E)  has  plans  to  inte¬ 
grate  its  operations  with  Los  Angeles- 
based  Southern  California  Gas  Co., 
which  is  also  owned  by  SDG&E’s  par¬ 
ent  company,  San  Diego-based  Sempra 
Energy.  And  PG&E  is  undergoing  a  se¬ 
ries  of  upgrades  and  replacements  — 
including  new  customer  information 
and  enterprise  application  integration 
(EAI)  systems,  as  well  as  nine  rebuilt 
customer-care  applications  —  all  by 
the  end  of  the  summer. 

Following  is  a  look  at  how  two  debt- 
riddled  companies,  PG&E  and  SCE,  are 
managing  those  changes  in  the  midst 
of  a  still-turbulent  market.  (Because 
SDG&E  had  sold  off  its  stranded  as¬ 
sets,  it  was  exempt  from  the  retail 
price  caps  that  prevented  PG&E  and 
SCE  from  raising  customers’  bills 
when  wholesale  prices  spiked;  there¬ 
fore,  it  didn’t  face  the  same  crippling 
debt  as  its  counterparts.) 

Regardless  of  the  challenges,  the  utili¬ 
ties  have  some  outdated  IT  systems, 
such  as  billing  and  customer  informa¬ 
tion,  that  are  mission-critical,  so  they 
have  little  choice  but  to  concentrate  on 
strengthening  their  infrastructures,  says 
Jim  Walker,  senior  energy  analyst  at  For¬ 
rester  Research  Inc.  in  Cambridge,  Mass. 

“The  most  important  thing  is  to  get  a 
bill  out  every  month  and  make  sure  it’s 
accurate,”  he  says.  “But  that’s  easier 
said  than  done  when  the  tariffs  keep 
changing.” 

Striving  for  Simplicity 

It  wasn’t  just  California  residents  and 
businesses  that  were  left  in  the  dark 
during  last  year’s  rolling  blackouts. 

State  officials  handed  down  a  steady 
stream  of  emergency  orders  aimed  at 


THE  MARCH 
THROUGH 
THE  CRISIS 


■  September  1996:  Gov.  Pete  Wil¬ 
son  signs  a  bill  to  open  the  state 
electricity  market  to  competition. 

■  March  1998:  State’s  wholesale 
electricity  markets  open. 

■  July  1999:  SDG&E  sells  its  gen¬ 
eration  plants,  making  it  exempt 
from  consumer  price  caps  or¬ 
dered  under  deregulation  law.  As 
retail  prices  rise  with  wholesale 
prices,  customers’  rates  triple 
over  the  next  year. 

■  May  2000:  Total  energy  costs  for 


the  month  average  $61  per  mega- 
watt-hour  (MWh),  up  from  1998 
and  1999  averages  of  $33. 

The  California  ISO  declares  the 
first  of  many  Stage  2  emergen¬ 
cies  (when  energy  reserves  fall 
below  5%). 

■  June  2000:  Average  monthly 
energy  costs  climb  to  $167/MWh. 
Rolling  blackouts  are  ordered  in 
San  Francisco  during  a  heat  wave. 

■  September  2000:  The  CPUC 
caps  rates  for  San  Diego  cus¬ 
tomers  for  three  years. 


■  December  2000:  Average 
monthly  energy  costs  skyrocket  to 
$317/MWh.  The  ISO  declares  the 
first  of  many  Stage  3  emergencies 
(when  reserves  fall  below  1.5%). 
The  Federal  Energy  Regulatory 
Commission  (FERC)  orders  a  soft 
price  cap  of  $150/MWh,  effective 
through  April  2001. 

The  Clinton  administration 
invokes  emergency  orders  to  force 
generators  to  sell  power  in  Califor¬ 
nia  after  they  refuse  state  utilities 
on  the  grounds  that  they’re  credit 
risks.  SCE,  later  joined  by  Gov. 
Gray  Davis,  sues  the  FERC  for  fail¬ 


ing  to  ensure  reasonable  whole¬ 
sale  electricity  rates. 

■  Jan.  2001:  The  credit  ratings 
of  PG&E  and  SCE  are  downgraded 
to  junk  status,  and  the  CPUC  ap¬ 
proves  temporary  rate  increases 
of  7%  to  15%  for  PG&E  and  SCE 
customers.  The  ISO  orders  rolling 
blackouts  in  northern  and  central 
California. 

The  Bush  administration  ex¬ 
tends  an  emergency  order  forcing 
power  companies  to  sell  to  Cali¬ 
fornia  but  warns  that  it’s  the  last 
extension. 
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gaining  control  during  the  energy  cri¬ 
sis.  “Every  regulatory  decision  that 
was  made  had  [an  IT]  systems  implica¬ 
tion,”  says  Mahvash  Yazdi,  CIO  at  Edison 
International  and  SCE,  its  utility  sub¬ 
sidiary,  both  in  Rosemead,  Calif. 

For  instance,  when  the  state  ordered 
tiered  rates  and  discounts  to  encour¬ 


age  lower  energy  consumption,  SCE 
had  to  reprogram  its  billing  systems  to 
reflect  the  complex  rate  structure.  Try¬ 
ing  to  get  a  leg  up  on  the  June  2001 
deadline,  SCE’s  IT  department  worked 
around  the  clock  to  write  the  new 
code,  with  help  from  its  offshore  devel¬ 
opment  center  in  India.  But  the  rates 


kept  changing  and  the  code  had  to  be 
revised  continually. 

“The  third  time  was  a  charm,  and  we 
met  the  date,  but  we  would  not  have 
been  able  to  do  that  without  our  suppli¬ 
ers,”  including  the  offshore  program¬ 
ming  firm,  says  Jodi  Collins,  director  of 
IT  application  services  at  SCE.  “I  can’t 
think  of  one  piece  of  IT  that  didn’t  get 
tried  through  this  period.” 

SCE’s  IT  leaders  realize  that  while 
they  made  it  through  the  worst,  they 
need  to  sharpen  the  firm’s  infrastruc¬ 
ture  so  it  can  more  easily  adapt  to  fu¬ 
ture  adversity. 

“We  need  to  . . .  become  more  agile,” 
says  Yazdi.  “And  we  also  need  to  sim¬ 
plify  our  environment  so  that  we  have 
fewer  . . .  more  capable  applications.” 

“Simplify”  has  become  the  mantra  of 
SCE’s  IT  department.  But  with  1,050  IT 
employees,  1,000  servers,  38TB  of  data, 
700  applications  and  more  than  70  mil¬ 
lion  lines  of  code,  the  utility’s  IT  lead¬ 
ers  have  been  challenged  just  to  get 
their  arms  around  their  infrastructure. 

“We’re  talking  about  a  huge  portfo¬ 
lio,”  says  Collins.  “So  we  have  redun¬ 
dancy,  we  have  technology  that’s  out¬ 
lived  its  usefulness,  we  have  areas 
where  we  have  gaps  in  the  technology.” 

Call  to  Action 

As  it  turned  out,  one  of  SCE’s  simpli¬ 
fication  projects,  its  call  center  opti¬ 
mization  effort,  was  actually  buoyed 
by  the  energy  crisis. 

“We  were  starting  the  project  when 
the  energy  crisis  hit,”  says  Collins.  “At 
that  time,  we  found  this  project  to  be 
on  the  critical  path  because  of  the  del¬ 
uge  of  calls  coming  in.” 

The  new  system  reduced  the  num¬ 
ber  of  screens  operators  used  by 
one-third,  and  it  added  a  caller  ID 
and  telephony/automatic  routing 
system  from  Westlake,  Calif.-based 


Genesis  Data  Networks. 

Collins’  team  shaved  several  months 
off  the  project  so  the  system  would  be 
ready  within  a  week  after  a  new  round 
of  energy  bills  went  out.  Since  then, 
SCE  has  cut  its  call  center  by  80  em¬ 
ployees,  trimmed  30  to  40  seconds  off 
call  times  and  seen  a  return  of  $3  mil¬ 
lion  per  year  on  the  $6  million  project, 
says  Collins. 

SCE  is  now  in  the  midst  of  upgrad¬ 
ing  to  Windows  XP  from  a  predomi¬ 
nantly  Windows  95  environment  (a 
small  percentage  of  employees  use 
Windows  98),  with  a  plan  to  begin  de¬ 
ployment  on  more  than  15,000  desk¬ 
tops  in  November.  The  upgrade  should 
take  about  a  year  and  a  half,  says  Mike 
Pinter,  director  of  IT  infrastructure 
services.  As  various  IT  contracts  come 
due,  SCE  is  also  looking  to  reduce  the 
number  of  vendors  it  uses,  he  adds. 

But  as  the  utility  looks  to  simplify  its 
infrastructure,  it’s  simultaneously  try¬ 
ing  to  stay  on  top  of  emerging  tech¬ 
nologies,  says  Solomon  Tessema,  di¬ 
rector  of  IT  enterprise  architecture 
and  telecommunications  and  program 
manager  of  mobility  strategy  at  SCE. 
Tessema  says  mobile  computing  will 
be  the  most  important  technology 
trend  during  the  next  five  to  10  years, 
so  he  has  created  an  enterprise  mobili¬ 
ty  strategy  program  in  which  senior 
business  unit  leaders  throughout  the 
company  are  examining  mobile  de¬ 
vices,  networks,  requirements  and  sys¬ 
tems  integration  strategies. 

The  list  goes  on.  SCE’s  capital  IT 
budget  is  up  30%  from  last  year’s  and 
is  expected  to  rise  13%  in  2003,  but 
when  asked  if  all  the  plans  are  within 
SCE’s  reach,  Yazdi  doesn’t  hesitate. 
“No,”  she  says.  Specific  projects  that 
are  already  in  the  works  have  gone 
through  an  extensive  ROI  review,  she 
Continued  on  page  26 


■  February  2001:  The  California 
Department  of  Water  Resources 
(DWR)  uses  state  bonds  to  begin 
buying  energy  (effective  through 
December  2002)  for  the  state’s 
three  investor-owned  utilities. 

The  DWR  signs  more  than  50 
long-term  power  deals  to  build 
the  state’s  reserves. 

■  March  2001:  The  state  ap¬ 
proves  major  retail  customer  rate 
increases.  The  first  statewide 
rolling  blackouts  are  declared  dur¬ 
ing  a  Stage  3  emergency. 

The  ISO  asks  the  FERC  to  in¬ 


vestigate  alleged  overcharges  by 
power  generators.  The  FERC  or¬ 
ders  wholesale  power  sellers  to 
justify  their  rates  or  refund  tens  of 
millions  of  dollars  to  the  utilities. 

Davis  announces  a  20/20  plan, 
offering  consumers  20%  rebates 
on  their  electric  bills  if  they  re¬ 
duce  consumption  by  20%. 

■  April  2001:  PG&E  files  for 
Chapter  11  bankruptcy  protection. 
The  FERC  tightens  wholesale 
price  controls. 

■  June  2001:  The  FERC  extends 


California’s  price  cap  to  spot  mar¬ 
ket  sales  in  California  and  the  10 
states  within  the  Western  Sys¬ 
tems  Coordinating  Council. 

■  September  2001:  PG&E  files  its 
bankruptcy  reorganization  plan. 

■  October  2001:  Retail  market 
choice  is  suspended  in  California. 

■  January  2002:  California’s  at¬ 
torney  general  files  suit  against 
PG&E,  claiming  it  diverted  billions 
from  its  regulated  utility  into  un¬ 
regulated  affiliates.  The  compa¬ 


ny’s  utility  unit  counters  with  a 
claim  that  the  state  violated  the 
deregulation  law  when  it  refused 
to  let  the  utilities  sell  power  gener¬ 
ated  by  the  facilities  it  still  owned. 

PG&E  and  the  CPUC  take  their 
rival  restructuring  plans  to  bank¬ 
ruptcy  court. 

■  February  2002:  A  federal  judge 
rejects  PG&E’s  restructuring  plan. 
The  state  asks  the  FERC  to  review 
some  long-term  power  deals,  say¬ 
ing  power  sellers  illegally  drove 
up  prices  and  forced  the  state  into 
lengthy,  unfair  contracts. 


■  March  2002:  PG&E  files  its  sec¬ 
ond  revised  reorganization  plan.  A 
U.S.  Bankruptcy  Court  judge  sets  a 
June  17  date  for  PG&E’s  creditors 
to  review  rival  plans  from  the  utili¬ 
ty  and  the  CPUC. 

■  April  2002:  The  CPUC  submits 
a  plan  to  restructure  PG&E  to  fed¬ 
eral  bankruptcy  court.  PG&E  de¬ 
nounces  the  plan. 

The  Foundation  for  Taxpayer 
and  Consumer  Rights,  which  tried 
to  block  the  CPUC  plan  by  filing  a 
petition  with  the  state  Supreme 
Continued  on  page  26 
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explains,  but  she’s  had  to  cancel  or 
postpone  other  projects. 

“Financially,  we  certainly  have  been 
impacted  by  the  energy  crisis,  and  we 
have  to  prioritize  where  we’re  spend¬ 
ing  our  dollars,”  Yazdi  says. 

‘Fast  Dinosaur’ 

After  years  of  beatings  in  the  press,  a 
Chapter  11  bankruptcy  protection  filing 
and  a  stack  of  lawsuits,  PG&E’s  IT  de¬ 
partment  isn’t  shooting  for  Space  Age 
sophistication. 

“Our  goal  is  to  be  a  fast  dinosaur.  Or 
a  slow  mammal,”  says  Roger  Gray,  CIO 
at  the  San  Francisco-based  utility. 

Actually,  the  primary  goal  has  been 
the  same  for  several  years,  says  Gray:  to 
replace  PG&E’s  customer  information 
system  (CIS).  “It’s  our  megasystem,”  he 
says.  But  every  time  he  tried  to  replace 
the  homegrown  CIS,  deregulation  and 
the  energy  crisis  put  his  plans  on  hold. 

Getting  the  old  system  ready  for 
deregulation  was  like  trying  to  turn  a 
’67  Chevy  into  a  rocket  sled,  he  says. 

But  after  years  of  tweaks  and  upgrades, 
the  system  has  finally  reached  the  end 
of  its  shelf  life,  says  Gray. 

“Whether  we’re  in  bankruptcy  or  not, 
we  needed  to  replace  the  systems,”  says 
Gray,  who  adds  that  PG&E  is  now  in  the 
process  of  implementing  a  CIS  platform 
built  around  San  Francisco-based  SPL 
WorldGroup  Inc.’s  CorDaptix  product. 

A  smart  move,  says  Walker.  As  PG&E’s 
legacy  system  ages,  the  market  is  grow¬ 


ing  more  complex,  prompting  the  need 
for  a  more  sophisticated  system. 

The  utility  is  also  installing  an  EAI 
system  from  Monrovia,  Calif.-based 
SeeBeyond  Technology  Corp.  That 
system,  along  with  the  CIS,  is  sched¬ 
uled  to  go  live  at  the  end  of  the  sum¬ 
mer.  In  addition,  PG&E  is  planning  to 
launch  a  new  human  resources/payroll 
system  next  year  and  is  pushing  for¬ 
ward  with  a  series  of  ongoing  projects 
and  upgrades. 

Most  of  the  projects,  such  as  the  new 
CIS,  EAI  and  finance  systems,  will  re¬ 
place  mission-critical  systems  that  were 
designed  for  a  utility  that  had  little  in¬ 
teraction  with  the  public  and  never 
dealt  with  outside  companies.  And  as 
PG&E  competes  for  cus¬ 
tomers,  it  must,  for  the  first 
time  in  its  history,  think 
about  how  to  sharpen  its  cus¬ 
tomer  service  tools  and  oper¬ 
ate  more  efficiently. 

“We’re  spending  more  mon¬ 
ey  this  year  on  IT  than  I  think 
we  have  in  recent  years,”  says 
Gray,  who  added  that  he’s  hir¬ 
ing  more  workers  this  year. 

PG&E’s  2002  IT  budget  of 
$350  million  is  expected  to 
rise  by  $25  million  and  then  return  to 
normal  in  2003,  he  says.  “We’ve  got  so 
much  work  stacked  up  that  we’re  literal¬ 
ly  working  24  hours,”  he  notes. 

But  as  PG&E  attempts  to  emerge 
from  Chapter  11,  various  unknowns  cre¬ 
ate  an  assortment  of  logistical  hurdles 
for  its  IT  department.  PG&E  has  spent 
much  of  this  year  duking  it  out  in  fed¬ 
eral  bankruptcy  court  with  the  Califor¬ 
nia  Public  Utilities  Commission  (CPUC) 
over  competing  plans  to  reorganize 
PG&E.  If  it  gets  its  way,  PG&E  Corp. 
and  its  utility  subsidiary  will  be  split 
into  unaffiliated  companies,  with  elec¬ 
tric  and  gas  distribution  run  by  the 


utility  and  electric  and  gas  transmis¬ 
sions  and  electric  generation  con¬ 
trolled  by  the  parent  corporation. 

Under  this  arrangement,  about  80% 
of  the  IT  department  would  go  to  the 
distribution  firm,  and  the  remaining 
20%  would  serve  the  transmission  and 
generation  operations,  explains  Gray. 
He  says  he’s  not  too  worried  about  re¬ 
assigning  staff;  the  hard  part  is  break¬ 
ing  up  the  systems  and  processes  that 
were,  in  many  cases,  brought  together 
when  IT  operations  were  centralized 
just  a  few  years  ago. 

“I’m  not  sure  if  breaking  companies 
up  or  merging  them  is  easier,”  says  Gray. 

Take  the  utility’s  computer  lab,  for 
instance.  It’s  in  the  midst  of  replacing 
4,000  of  its  20,000  desktop 
computers  from  a  variety 
of  vendors  with  1.5GB  PCs 
from  Dell  Computer  Corp., 
explains  Ron  Dodson,  a 
PG&E  telecommunica¬ 
tions  technician.  Mean¬ 
while,  PG&E  is  migrating 
from  Windows  NT  to 
Windows  2000. 

Workstation  upgrades 
used  to  be  handled  by  indi¬ 
vidual  department,  accord¬ 
ing  to  Anna  Carrancho,  supervisor  of 
computer  telecommunications  ser¬ 
vices  for  maintenance  and  operations. 
When  PG&E  centralized  IT  support 
two  years  ago,  workers  there  feared 
that  they’d  never  get  new  computers 
due  to  bureaucracy.  But  employees  are 
finally  starting  to  prefer  the  central¬ 
ized  approach,  Carrancho  says. 

PG&E’s  central  network  and  testing 
groups  are  in  the  midst  of  consolidat¬ 
ing  its  SQL  servers  into  a  Dell  storage- 
area  network  and  replacing  PG&E’s 
old  analog  systems  with  microwave 
networks.  The  analog  backbones, 
which  don’t  have  the  capacity  to  sup- 


Roger  Gray, 
CIO  at  PG&E 


port  today’s  data  systems,  should  be 
fully  retired  by  2004  or  2005,  says  Jeff 
Bennett,  manager  of  network  planning. 

As  these  and  other  projects  get  un¬ 
der  way,  PG&E’s  round-the-clock 
Transmission  Operations  Center 
(TOC)  has  been  trying  to  stay  on  top  of 
its  day-to-day  work  while  coping  with 
both  internal  and  external  changes. 

The  TOC  communicates  with  the 
state  ISO,  which  has  controlled  Cali¬ 
fornia’s  power  grid  since  deregulation 
took  effect  in  1998.  The  ISO  collects 
needed  load  and  generation  informa¬ 
tion  from  the  various  players  in  the 
state’s  energy  industry  to  make  sure 
supplies  meet  demand. 

So  unlike  the  other  units  within 
PG&E’s  IT  division,  the  TOC  hasn’t 
been  able  to  move  forward  with  a  sys¬ 
tems  overhaul  because  it  must  follow 
the  ISO’s  lead  —  a  situation  foreign  to 
a  utility  that  has  always  operated  inde¬ 
pendently.  And  to  further  complicate 
matters,  even  the  ISO,  which  has  yet  to 
master  the  complex  market,  is  unclear 
about  its  future  vision  for  the  systems 
that  control  the  state’s  power  grid. 

“It’s  a  feast-or-famine  situation,” 
says  Steve  MacCool,  TOC  lead  senior 
systems  dispatcher. 

On  May  1,  the  ISO  submitted  a 
market  redesign  plan  to  the  Federal 
Energy  Regulatory  Commission. 

But  “there  are  still  a  lot  of  uncer¬ 
tainties  that  need  to  be  worked  out,” 
acknowledged  Lorenzo  Kristov,  the 
ISO’s  manager  of  market  design,  dur¬ 
ing  a  recent  press  conference.  I 


ONGOING  CHAH6E 


As  SD6&E  tackles  the  lingering  effects  from  the 
California  energy  crisis,  it’s  planning  an  operational 
integration  with  Southern  California  6as  that  will 
affect  IT  for  years  to  come. 
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Court,  says  the  CPUC’s  plan  ille¬ 
gally  proposed  to  maintain  ex¬ 
cessive  electricity  rates  to  bail 
out  PG&E. 

California  Attorney  General 
Bi>!  l.ockyer  files  suit  against  four 
energy  companies,  charging  that 
they  helped  engineer  the  state’s 
energy  crisis.  State  officials  re¬ 
work  eight  contracts  with  four 
power  companies,  cutting  them 
from  SIS  billion  to  $11.4  billion. 

State  energy  officials  warn  that 
energy  supplies  could  be  at  risk  if 
plans  to  build  power  production 
plants  are  dropped  or  postponed. 


a  May  1,  2002:  The  ISO  submits 
a  plan  for  a  revised  market  tc  the 
FERC,  calling  for  extended  price 
caps.  Class-action  lawsuits  pile 
up  on  behalf  of  customers  who 
want  their  money  back  from  ener¬ 
gy  companies  that  inflated  prices. 

«  May  6,  2002:  Internal  Enron 
Corp.  documents  released  by  the 
FERC  reveal  that  Enron  traders 
created  false  congestion  on  Cali¬ 
fornia's  power  transmission  grid. 

■  May  16.  2002:  The  CPUC  or¬ 
ders  public  hearings  on  SDG&E 
attempts  to  settle  a  dispute  with 


the  commission  over  whether  it 
must  return  to  retail  customers 
the  $425  million  in  profits  it  made 
during  the  energy  crisis. 

*  May  21, 2002:  After  CMS 
Energy  Corp.,  Reliant  Resources 
Inc.  and  Williams  Co.  admit  to  en¬ 
gaging  in  bogus  trades  to  drive  up 
their  revenues,  causing  the  Secu¬ 
rities  and  Exchange  Commission 
to  widen  investigations  into  ener¬ 
gy  industry  trading,  the  FERC  or¬ 
ders  150  energy  producers  to  sub¬ 
mit  affidavits  stating  whether  they 
participated  in  “wash  trades.” 

State  Sen.  Joe  Dunn  (D-Garden 


Grove),  chairman  of  the  Senate  Se¬ 
lect  Committee  to  Investigate  Price 
Manipulation  of  the  Wholesale  En¬ 
ergy  Market,  accuses  the  California 
ISO  of  asking  traders  to  buy  more 
power  than  was  needed  at  above¬ 
market  rates  in  November  2001. 
The  ISO  forms  a  special  committee 
and  hires  an  independent  investi¬ 
gator  to  look  into  the  charges. 

■  May  24, 2002:  CMS  Chairman 
and  CEO  William  McCormick  resigns. 

■  May  30, 2002:  Lockyer  files 
lawsuits  against  eight  more  ener¬ 
gy  companies. 


■  June  3, 2002:  The  U.S. 
Supreme  Court  deals  a  defeat 
to  Davis,  ruling  that  the  whole¬ 
sale  power  contracts  he  took 
control  of  when  state  utilities 
could  no  longer  honor  them 
should  have  been  voided.  A  hear¬ 
ing  will  determine  how  much  the 
state  must  reimburse  Charlotte, 
N.C.-based  Duke  Energy  Corp., 
which  brought  the  case  before 
the  high  court. 

■  October  2002:  FERC-ordered 
price  caps  are  scheduled  to  end; 
the  FERC  is  scheduled  to  decide 
on  an  ISO  redesign  plan. 
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Wireless  communications 
can  mean  a  lot  of  things. 

At  Palm,  we  refer  to  wireless 
by  what  it's  meant  to  our 
customers.  Like  access  to 
relevant  information.  Or 
connecting  workgroups 
remotely.  Or  building  work¬ 
spaces  without  wires.  Along 
with  solutions  providers 
that  include  BEA,  IBM, 


McKesson,  and  Siebel 
Systems,  Palm  delivers 
wireless  that  creates 
competitive  advantages 
for  today's  businesses. 

For  more  on  how  we've 
helped  deliver  results,  visit 
palm.com/enterprise  and 
read  our  customer  success 
stories  and  total  cost  of 
ownership  white  paper. 


Wireless  communication  requires  a  compatible  mobile  phone  or  modem  or  a  wirelessly  enabled  Palm  handheld  and  the  Palm. Net  proprietary  service, 
sold  separately.  Coverage  not  available  in  all  areas.  ©2002  Palm,  Inc.  All  rights  reserved.  Palm.Net  is  a  registered  trademark  and  Palm  and  the  Palm  logo 
are  trademarks  of  Palm,  Inc.  or  its  subsidiaries.  Other  products  and  brand  names  may  be  trademarks  or  registered  trademarks  of  their  respective  owners 
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The  exodus  began  in  December. 

Bruce  Moulton,  vice  president  of  infra¬ 
structure  risk  management  at  Fidelity 
Investments  in  Boston,  was  let  go. 

That  same  month,  Steve  Katz,  chief  se¬ 
curity  and  privacy  officer  at  Merrill 
Lynch  &  Co.  in  New  York,  accepted  a 
buyout.  And  in  April,  shortly  after  his 
face  appeared  on  the  cover  of  CIO  magazine,  Mich¬ 
ael  Young,  chief  information  security  officer  and 
principal  privacy  officer  at  State  Street  Global  Advi¬ 
sors  in  Boston,  lost  his  job  in  a  company  reshuffle. 

The  departure  of  these  and  other  information  se¬ 
curity  veterans  from  Fortune  500  companies  reflects 
the  beginning  of  turbulent  times  for  chief  security 
officers  (CSO).  Since  Sept.  11,  CSOs  have  faced  new 
pressures  to  prove  the  value  and  effectiveness  of 
their  security  measures,  even  as  they  struggle  politi¬ 
cally  for  legitimacy  within  their  corporations  and  for 
support  from  the  technology  and  business  units 
they’re  trying  to  protect,  say  analysts. 

“We’re  in  a  transition  period,  and  the  smart  [CSOs] 
are  getting  out  of  the  way,”  says  David  Foote,  presi¬ 
dent  and  chief  research  officer  at  Foote  Partners  LLC, 
a  management  consultancy  and  IT  job  research  firm 
in  New  Canaan,  Conn.  “They  see  the  risks  in  trying 
to  build  in  the  next  phase  of  security  —  moving  from 
fragmented  delivery  of  security  technology  to  a  coor¬ 
dinated,  aggressive,  well-conceived  security  program. 

“They  understand  how  long  it  takes  to  build  atten¬ 
tion  and  change  the  culture  to  make  this  next  step, 
but  they’re  not  getting  the  support  they  need  to 
brand  and  build  this  next  level  of  security,”  says 
Foote,  who  is  also  a  Computerworld  columnist. 

Uphill  Battle 

Corporate  politics  is  the  single  biggest  problem 
facing  CSOs,  according  to  some  who  hold  such  posi¬ 
tions  and  industry  analysts.  Even  though  CSOs  have 
attained  a  chief-level  title,  they  report  that  they  still 
generally  lack  enough  power  to  be  truly  effective. 
And  there’s  growing  friction  between  the  CSO,  who 
usually  has  only  a  handful  of  people  on  staff,  and  the 
CIO,  who  has  hundreds  or,  in  some  cases,  thousands 
of  people  on  staff,  says  John  Pescatore,  a  security  re¬ 
search  analyst  at  Gartner  Inc.  in  Stamford,  Conn. 

Because  of  these  conflicts  and  the  expanding  role 
of  information  protection  to  encompass  privacy,  reg¬ 
ulatory  compliance  and  disaster  recovery,  Firms  gen¬ 
uinely  don’t  know  where  to  put  the  function  of  infor¬ 
mation  security  —  if  they  have  a  formal  management 
function  at  all,  says  Tracy  Lenzner,  CEO  of  executive 
security  search  Firm  Lenzner  Group  in  Las  Vegas.  In 
fact,  only  54%  of  72  chief  executives  working  for  com¬ 
panies  with  at  least  $1  billion  in  annual  revenues  said 
they  have  a  CSO  in  place,  according  to  a  survey  re¬ 
leased  in  January  by  technology  and  strategy  consult¬ 
ing  firm  Booz  Allen  &  Hamilton  Inc.  in  McLean,  Va. 

“Unfortunately,  for  many  organizations  I  think  that 
the  executive-level  positioning  of  CSOs  will  be 
heightened  only  when  we’re  hit  with  a  catastrophic 
event,"  Lenzner  adds. 

That’s  also  the  consensus  among  the  unemployed 


THE  DEPARTURE  OF  STEVE  KATZ  (right)  from  Merrill 
Lynch  is  a  reflection  of  the  increasing  focus  on  the  techni¬ 
cal  aspects  of  security. 


and  employed  CSOs  who  were  interviewed  for  this 
story,  all  of  whom  say  information  protection  has  al¬ 
ways  been  an  uphill  battle  because  it’s  difficult  to 
prove  its  value  unless  a  catastrophe  occurs.  As  such, 
CSOs  lack  the  power  to  do  more  than  set  policies 
and  put  out  fires,  says  a  CSO  from  a  Fortune  100 
technology  equipment  manufacturer  who  asked  to 
remain  anonymous. 

“The  greatest  threat  we  face  is  the  belief  of  senior 
management  that  there  is  no  threat.  So  we  don’t  get 
funds,  money  or  resources,  and  without  those  things, 
you  can  never  address  security  threats  and  risks,” 
says  another  security  officer  at  a  global  financial 
firm  who’s  planning  his  exit  strategy  and  starting  a 
consulting  practice. 

Young  says  he  believes  some  of  these  problems 
can  be  lessened  if  CSOs  get  on  board  with  business 
initiatives  and  competitive  strategies  more  consis¬ 
tently.  “As  a  whole,  CSOs  still  express  security  in 
technical  terms  instead  of  business  terms,”  he  says. 

Katz,  Young  and  Moulton,  however,  all  speak  the 
language  of  business  and  have  driven  information 
risk  management  throughout  their  former  organiza¬ 


tions.  (As  for  his  business  savvy,  Moulton  thinks  he 
might  have  worked  himself  out  of  a  job  by  integrat¬ 
ing  security  ownership  into  the  business  units  them¬ 
selves.)  Similarly,  Katz  looks  at  security  from  the 
standpoint  of  business  enablement,  adding  that  risk 
management  methodologies  are  no  different  from 
other  processes  of  building  business  risk  models  for 
nontechnical  offerings. 

Another  view  of  this  upheaval  in  security  leader¬ 
ship  is  that  Katz,  Young  and  Moulton  have  complet¬ 
ed  their  work  of  championing  security.  They  have 
laid  the  critical  groundwork  by  building  consensus; 
establishing  best  practices  and  awareness;  and 
preparing  business  and  technology  units  for  compli¬ 
ance,  liability,  security  audits  and  procedural  foren¬ 
sics  investigations.  Now  Katz  and  Young  are  offering 
these  start-up  services  to  smaller  companies  and 
home  offices  through  consulting  businesses,  a  path 
Moulton  says  he  might  also  take. 

The  next  phase  of  information  protection  involves 
becoming  more  technical  in  focus,  say  analysts. 

“In  the  past,  we  measured  our  success  by  telling 
about  the  programs  we  put  in  place  and  the  policies 
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we  wrote.  As  we  move  forward,  it’s  more  about  how 
well  those  policies  are  being  implemented,  how  se¬ 
cure  the  systems  are  and  what  impact  they’re  hav¬ 
ing,”  says  Michael  Ressler,  director  of  security  ser¬ 
vices  at  New  York-based  IT  consulting  firm  Predic¬ 
tive  Systems  Inc.  “And  that  means  more  technical 
background  is  needed  for  security  management.” 

Booz  Allen’s  survey  cites  three  areas  that  chief 
executives  are  more  focused  on  since  Sept.  11: 

■  Seventy-five  percent  of  respondents 
said  they’re  more  concerned  with  infra¬ 
structure  protection. 

■  Seventy-one  percent  said  they’re 
more  concerned  with  risk  assessment. 

■  Sixty-nine  percent  said  they’re  con¬ 
cerned  about  employee  morale.  At  one 
Fortune  100  technology  manufacturer,  low  morale  is 
already  translating  into  abuses  by  employees,  ac¬ 
cording  to  its  CSO,  who  says  pornography  Web  surf¬ 
ing  at  the  company  is  up  40%. 

If  Katz’s  replacement  is  any  indication,  some  firms 
are  already  catching  on  to  this  more  technical  focus. 
Merrill  Lynch’s  new  chief  of  security  and  privacy, 


David  Bauer,  has  a  highly  technical  background,  as  he 
was  in  charge  of  network  management  and  engineer¬ 
ing,  including  security  engineering,  at  Morgan  Stan¬ 
ley  Dean  Witter  &  Co.  and  then  at  Deutsche  Bank. 

But  even  with  the  best  technology  project  manage¬ 
ment  and  business  skills,  these  new  technobusiness/ 
security  hybrids  will  run  into  all  the  same  empower¬ 
ment  problems  as  their  forerunners,  says  Thornton 
May,  a  senior  member  of  executive  advisory  firm 
Toffler  Associates  Inc.  in  Manchester, 
Mass.,  and  a  Computer-world  columnist. 
To  survive  this  upheaval,  security  execu¬ 
tives  must  be  strong  in  business  and 
technology,  he  adds. 

“Security  professionals  will  need  to 
understand  the  lingua  franca  of  business, 
which  is  accounting,”  he  says.  “They  also  have  to  be 
able  to  understand  how  the  network  works,  how  the 
application  works  and  how  the  hardware  works  if 
they’re  to  mobilize  the  security  organization.  Then 
they  need  to  align  their  security  strategy  to  where 
the  business  is  going  and  tone  their  architecture  and 
deployment  to  fit  the  financial  plan  of  the  company.”  I 


WHAT’S  IN  A  TITLE? 

Executives  with  other  titles  also 
bear  heavy  responsibility  for 
information  security. 
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The  exodus  of  some  renowned 
security  executives  marks  the 
beginning  of  turbulent  times 
for  CSOs.  By  Deborah  Radcliff 


MISSIONS  AMD 

MINEFIELDS 

Key  issues  facing  CSOs: 

■  Ongoing  friction  between  the  CIO,  whose  mis¬ 
sion  is  to  make  the  network  hum  while  running 
large  departments,  and  the  CSO,  who  is  seen  as 
a  business  inhibitor  and  has  only  a  handful  of  di¬ 
rect  reports 

■  Lack  of  empowerment  to  get  things  done 

■  Rat  budgets  and  increased  security  threats 

■  New  demand  to  prove  the  effectiveness  of 
security  programs 

■  Mergers  and  acquisitions 

■  Increased  physical  security  concerns  as  a  re¬ 
sult  of  the  Sept.  11  terrorist  attacks,  which  affect 
CSOs  who  have  oversight  for  physical  security 
as  well  as  other  CSOs  who  implement  the  tech¬ 
nological  solutions  to  mitigate  such  risks 

What  CSOs  need 
to  do  to  be  effective: 

■  Form  relationships  and  strategic  alliances  with 
corporate  influencers  in  business  units  and  in 
the  auditing,  IT  and  legal  departments. 

■  Become  business  enablers  by  using  security 
technologies  that  reduce  overhead,  provide  bet¬ 
ter  service  and  otherwise  support  business 
processes  with  better,  faster  and  cheaper  ways 
of  getting  things  done. 

■  Take  advantage  of  new  assessment  and 
benchmarking  tools  to  help  report  the  compa¬ 
ny's  overall  security  posture,  risk  modeling  and 
program  effectiveness.  (For  more  information, 
watch  for  our  upcoming  Knowledge  Center  on 
security  in  July.) 

■  Take  accounting  and  business  courses  and 
get  the  Certification  for  Information  System 
Security  Professionals. 

■  Keep  abreast  of  regulatory  issues  and  bills 
before  Congress. 

■  Be  impeccable  in  appearance,  articulation, 
writing  and  other  forms  of  presentation 


SOURCES:  Tracy  Lenzner.  founder  of  executive  security 
recruitment  firm  Lenzner  Group  ( w\w.lenznergroup . 
com)-,  John  Pescatore,  an  analyst  at  Gartner  (www 
gartner.com):  Mike  Hager,  vice  president  of  network  se¬ 
curity  and  disaster  recovery  at  OppenheimerFunds  Dis¬ 
tributor  Inc.  in  New  York,  and  the  research  report  How 
Corporate  Security  Is  Reshaping  the  Post  -9/11  CEO  Agon 
da,"  by  Booz  Allen  &  Hamilton 
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Wrangling 

native 
Deals  With 

Integrators 

Customers  are  shifting  away  from  traditional 
fixed-price  and  time-and-material  contracts  to 
more  flexible  transaction  and  incentive-based 
pricing  structures.  By  Jaikumar  Vijayan 


With  cost  a  primary  dri¬ 
ver  behind  many  out¬ 
sourcing  arrangements 
these  days,  a  growing 
number  of  customers  are 
shifting  away  from  traditional  fixed- 
price  and  time-and-material  contracts 
to  more  flexible  transaction  and  incen¬ 
tive-based  pricing  structures. 

“There  is  a  much  greater  sophistica¬ 
tion  in  contract  management  and  ne¬ 
gotiations  by  users”  than  ever 
before,  says  Neal  Dittersdorf,  a 
partner  at  Washington-based  law 
firm  Venable,  Baetjer,  Howard  & 
Civiletti  LLP. 

The  most  visible  change  in  contracts 
with  integrators  is  taking  place  on  the 
pricing  front,  Dittersdorf  says.  Service 
providers  are  becoming  more  flexible 
in  the  way  they  package  and  price 
deals. 

Driving  many  of  the  changes  is  the 
tough  economic  climate,  says  David  C. 
Hollingsworth,  director  of  enterprise 
applications  at  Watson  Wyatt  World¬ 
wide.  a  human  resources  management 
firm  in  Washington. 

“Vendors  that  were  very  cost-pro¬ 
hibitive  for  us  in  the  past  are  coming 
back  with  completely  revamped  pro¬ 
posals  to  make  sure  they  can  at  least 
get  in  the  door,”  Hollingsworth  says. 
For  instance,  a  proposal  for  a  data 


backup  service  that  Watson  Wyatt 
previously  rejected  as  too  expensive 
became  more  palatable  after  the  ven¬ 
dor  recently  offered  the  same  service 
using  a  more  cost-effective  technology, 
Hollingsworth  says. 

Tumbling  Rates 

The  slowdown  in  IT  spending  is 
putting  considerable  pressure  on  ven¬ 
dors  to  drop  prices  while  delivering 
the  same  service  levels  as 
before,  says  Juergen  Rottler,  a 
vice  president  at  Hewlett- 
Packard  Co.’s  services  group. 
Contract  workers  are  settling 
for  20%  to  30%  lower  rates  for  certain 
job  skills  these  days  compared  with 
2000,  says  Dan  Hoffman,  CEO  of 
Digerati  Solutions  LLC,  a  Babylon, 

N.Y. -based  systems  integrator  that  pro¬ 
vides  engineering,  desktop  and  project 
management  contractors  to  financial 
services  firms  (see  chart). 

“Many  [IT  workers!  have  been  laid 
off,  so  there’s  a  surplus  of  resources. 
Companies  are  taking  this  as  an  oppor¬ 
tunity  to  negotiate  more  extensively  on 
prices,”  Hoffman  says. 

Customers  are  also  beginning  to 
more  closely  scrutinize  the  financial 
stability  and  viability  of  the  companies 
they’re  interested  in  partnering  with  — 
not  only  before  they  sign  on  but  also 


during  the  course  of  a  contract. 

“We  are  looking  a  lot  more  closely  at 
vendor  funding  and  stability,”  Hol¬ 
lingsworth  says.  This  means  a  lot  more 
face-to-face  communications  and  insis¬ 
tence  on  getting  details  of  new  busi¬ 
ness  plans  and  ventures. 

Here  are  some  other  factors  that  IT 
managers  and  analysts  suggest  consid¬ 
ering  when  negotiating  contracts  with 
systems  integrators: 

■  There’s  no  such  thing  as  a  one-size-fits- 
all  pricing  model.  Be  prepared  to  mix  and 
match  as  needed  and  choose  wisely. 

It’s  an  approach  that  Nielsen  Media 
Research  in  New  York  is  considering 
for  a  long-term  application  outsourc¬ 
ing  project  with  Cognizant  Technology 
Solutions  in  Teaneck,  N.J.,  to  develop  a 
data  management  system. 

In  structuring  the  contract,  Nielsen 
is  breaking  the  project  into  three  phas¬ 
es  —  development,  enhancement  and 
maintenance,  says  CIO  Kim  Ross. 

The  first  phase  will  be  executed  on  a 
fixed-price  basis,  while  the  other  two 
are  likely  to  be  structured  under  a  vari¬ 
able,  transaction-based  model.  Both 
parties  are  trying  to  estimate  the  cost 
of  ongoing  enhancements  and  main¬ 
tenance,  he  says.  But  “the  future  phas¬ 
es  are  not  legally  bound,”  Ross  says. 
This  makes  the  contract  more  open- 
ended  and  flexible  for  both  parties, 
Ross  says. 

■  Use  service-level  agreements  and  other 
quantifiable  measures  to  make  sure  projects 
are  being  delivered  on  time  and  within 
scope. 

Nielsen,  for  instance,  uses  a  tech¬ 
nique  called  Function  Point  Analysis 
for  estimating  project  size,  managing 
change  of  scope  and  communicating 
functional  requirements  with  Cog¬ 
nizant. 

Nielsen  may  give  Cognizant  a  proj¬ 
ect  to  develop  a  system  with  2,000  in¬ 
dividual  functional  points  to  develop, 
maintain  and  enhance.  It  then  uses 
productivity  modeling  tools  to  esti¬ 
mate  project  requirements. 

The  approach  gives  both  Cognizant 
and  Nielsen  hard  numbers  to  base 
pricing  on  and  to  measure  perfor¬ 
mance  against,  Ross  says. 

■  Have  provisions  that  clearly  spell  out 
what  happens  to  intellectual  property  and 
shared  software  and  hardware  in  case  a  re¬ 
lationship  has  to  end,  attorney  Dittersdorf 
says. 

■  When  it  comes  to  offshore  outsourcing, 
choose  the  right  applications  to  outsource 
and  maintain  constant  communication  with 
your  vendor,  says  Jim  Beattie,  chief  tech¬ 
nology  officer  at  CCC  Information  Ser¬ 
vices  Inc.,  a  Chicago-based  provider  of 
networking  services  to  the  auto  indus- 


Rates  for  Techs 


SYSTEMS  ENGINEER:  Responsible  for 
planning  and  engineering  of  LAN/WAN 
infrastructure. 

RATE 

Spring  2000:  $110  to  $150  per  hour 

Spring  2002:  $85  to  $110  per  hour 

- -... - — _ . _ 

■ .  Dv . .  -  V  %  UK.  ’ 

_ 

PROJECT  ENGINEER  - 
INFRASTRUCTURE:  Duties  include  sup¬ 
porting  project  design  activities  for  data 
and  telecommunications  infrastructure. 

RATE 

Spring  2000:  $100  to  $125  per  hour 
Spring  2002:  $75  to  $100  per  hour 

PROJECT  MANAGER:  Responsible  for 
the  management  of  large  and  complex 
projects.  This  person  plans  and  coordi¬ 
nates  project  activities  in  terms  of  sched¬ 
ule,  performance  and  cost. 

RATE 

Spring  2000:  $110  to  $135  per  hour 

Spring  2002:  $85  to  $110  per  hour 

'tj,  T  ,  | 

SOURCE.  DIGERATI  SOLUTIONS  LLC.  BABYLON.  N.Y 

try.  Projects  that  involve  short  lead 
times  or  a  high  degree  of  collaborative 
effort  between  different  business  units 
aren’t  the  best  candidates  to  ship  over¬ 
seas.  Those  projects  with  longer  devel¬ 
opment  cycles  make  more  sense  to 
send  abroad,  he  says. 

■  Incentive-based  pricing  models  benefit 
both  parties.  For  instance,  an  outsourc¬ 
ing  vendor  that  gets  paid  by  the  num¬ 
ber  of  help  desk  incidents  it  responds 
to  every  month  will  have  little  incen¬ 
tive  to  reduce  the  number  of  calls  it 
fields  —  even  if  that  would  ultimately 
reduce  its  customer  support  costs,  says 
Steve  Dauber,  a  vice  president  at  New 
York-based  outsourcer  Center  Beam 
Inc. 

But  under  a  fixed-price  model,  says 
Dauber,  the  vendor  makes  money  only 
by  designing  out  underlying  problems 
and  reducing  the  number  of  help  desk 
calls  —  a  scenario  that  benefits  both 
parties. 

Says  Dauber,  “Instead  of  paying  for 
activity,  pay  for  results.”  I 


FIELD  TECH:  Responsibilities  include 
maintenance  and  operational  support  for 
all  desktops. 

RATE 

Spring  2000:  $45  to  $55  per  hour 
Spring  2002:  $30  to  $40  per  hour 


a.k.a 


also  known  as  /  abbrev:  a.k.a. 

Whatever  you  call  it,  security  —  a.k.a.  encryption,  a.k.a.  business  continuity,  a.k.a.  intrusion  detection, 
a.k.a.  firewall  availability,  a.k.a.  IP  VPN  management  —  is  enough  to  keep  you  up  at  night. 

We  know  security 

Fortunately,  we've  got  one  of  the  largest  groups  of  certified  Security  Specialists  in  the  industry,  working 
to  provide  user  authentication,  network  intrusion  protection  and  IP  VPN  management  services.  Our  Sprint 
E|Solutionsm  Centers  can  provide  a  100%  dual-site  availability  SLA  and  firewall  availability  24x7x365.  We 
deliver  secure,  dedicated,  worldwide  Internet  connections  —  including  DSL,  Dial  and  wireless  access.  In 
short,  Sprint  is  known  industry-wide  as  a  leading  provider  of  comprehensive  and  flexible  security  solutions. 

We  know  reliability 

But  we  know  security  without  reliability  is  also  known  as  insecurity.  The  fact  is,  we’re  in  the  network 
business  for  the  long  haul,  and  we  understand  how  important  it  is  to  you  that  everything  runs  smoothly.  So 
rest  easy  knowing  that  Sprint's  long  distance  network  had  the  fewest  FCC-reportable  outages  of  the  top  three 
major  competitors  for  the  sixth  straight  year.  And  with  the  latest  innovative  technology,  we  can  help  you  bring 
IP  flexibility  to  Frame  Relay  and  Frame  Relay  security  to  IP.  Also  known  as  a  little  peace  of  mind. 

Secure  solutions  when  you  want  them,  how  you  want  them  —  another  sign  of  an  intelligent  network  and  the 
people  who  make  it  work  (for  you). 


To  access  our  library  of  downloadable  white  papers,  visit  the  Sprint  Internet 
answer  portal,  a.k.a.  sprint.com/whitepapers/12  or  call  1-877-604-1843. 


Sprint 


Copyright  ©  Sprint  2002  All  rights  reserved 


Lotus,  software 


WINNING  TAKES  MORE 
THAN  TEAM  CHEMISTRY. 

IT  TAKES  TEAM  SOFTWARE. 


Team  communication  is  everything.  Lotus  collaboration  software,  with  online  meeting  spaces  and  secure  corporate 
instant  messaging,  makes  communication  instant,  so  every  project  goes  down  in  the  “win”  column.  Lotus.  Part  of  our 
winning  software  team,  along  with  DB2?  Tivoli®  and  WebSphere®  Check  out  our  Webcast  at  ibm.com/lotus/team 


I 


(e)  business  is  the  game.  Play  to  win: 


software 


e-business.  It's  the  only  game  in  town.  And  downtime  means  losing  profits  and  opportunities,  so  you 
can’t  let  it  happen.  IBM  Tivoli  software  lets  you  predict  the  business  impact  of  the  technology  you’re 
responsible  for,  so  that  you  can  make  smarter  decisions  today.  Tivoli.  Part  of  our  winning  software  team, 
along  with  DB2f  Lotus'  and  WebSphere”  To  find  out  more  view  our  Webcast  at  ibm.com/tivoli/smarter 


THIS  GAME,  THERE 


CAH  BE  NO  TIMEOUTS. 


NO  DELAYS.  NO  STOPPAGE. 


■ 


(e)  business  is  the  game.  Play  to  win. 


IBM.  DB2.  Lotos,  Tivoli.  WebSphere,  the  e.busines 
of  International  Business  Machines  Corporation  ir 


Benchmarks  prove  it.  Customers  swear  by  it.  DB2  is  a  better  distributed  database  than  Oracle.  Not  to  mention 
more  manageable  and  more  affordable.  And  because  it  can  work  across  any  platform,  it’s  the  perfect 
database  for  companies  large,  small,  and  growing.  DB2.  Part  of  our  winning  software  team,  along  with 
Lotus®  Tivoli®  and  WebSphere®  Check  out  the  benchmarks  and  get  a  free  TCO  report  at  ibm.com/db2/rocks 


( ^business  is  the  game.  Play  to  win. “ 


1 ay  to  win  are  registered  trademarks  or  trademarks  of  International  Business  Machines 
Linus  Torvalds.  UNIX  is  a  registered  trademark  of  The  Open  Group  in  the  United  States 
3  United  States  and/or  other  countries.  ©2002  IBM  Corporation.  All  rights  reserved. 
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WORKSTYLES 

IT  Is  a  Partner  in 
Helping  Scotts  Grow 


Brian  Belcher,  vice  president  of  infor¬ 
mation  systems  at  The  Scotts  Co., 
talks  about  how  his  department  links 
to  business  at  the  consumer  lawn- 
care  products  retailer. 

What  are  the  most  critical  systems  sup¬ 
ported  or  developed  by  your  department 
on  a  daily  basis?  “A  couple  of  years 
ago,  we  converted  to  SAP  R/3,  so  we 
support  all  the  core  business  appli¬ 
cations  in  North  America,  which  in¬ 
cludes  order  entry,  warehousing  and 
distribution,  financials,  plant  opera¬ 


tions,  forecasting,  purchasing  and 
management  reporting.  It’s  very 
integral  to  our  business.” 

How  would  you  describe  the  pace  of 
the  work?  “It’s  hectic  to  steady,  and 
always  challenging.  Now  that  it’s 
spring  we  seem  to  be  busy  all  the 
time.  We  try  to  do  projects  in  the 
off-season,  so  we’re  not  going 
through  the  learning  curve  when 
things  are  hectic.” 

How  would  you  describe  the  overall 


culture  of  IT  at  your  company?  “We’re 
a  fairly  casual  organization  — 
there’s  some  formality,  but  we’re 
not  bureaucratic  by  any  stretch. 
We’re  very  business-oriented  — 
whereas  the  old  environment  was 
custom-programming,  the  new 
environment  is  package-oriented, 
so  we  don’t  have  any  hard-core 
programmers. 


“For  example,  we  have  a  guy  in 
the  distribution  area  who  was  a  dis¬ 
tribution  warehouse  manager.  We’re 
trying  to  hire  people  who  connect 
to  the  business.” 

How  much  interaction  does  your  IT  de¬ 
partment  have  with  end  users  or  other 
departments  in  your  company?  “In 

day-to-day  maintenance,  we  interact 


Tripwire  is  The  Data  Integrity  Assurance  Company 


Increase  Control  and  Stability 

■  Ongoing  monitoring  and  reporting 

Lower  Costs 

■  Find  and  fix  problems  quickly  and  precisely  - 
no  more  guess  work 

Your  firewalls  and  intrusion  detection  tools  alone  are 
not  enough  to  keep  systems  trustworthy.  Tripwire's  data 
integrity  assurance  products  are  the  only  way  to  know 
with  100%  confidence  that  your  data  remains  uncompro¬ 
mised.  For  nearly  10  years  Tripwire  has  been  helping  IT 
professionals  know  exactly  what’s  changed  on  their 
systems,  and  helping  them  to  recover  quickly. 


For  a  FREE  30-day 
fully-functional  eval, 

call  toll-free:  1.80Q.TRIPWIRE 

(874.7947)  or  visit 

http://enterprise.tripwire.com 

today! 


TDimifmr 

rmnrtfti 

THE  DATA  INTEGRITY  ASSURANCE  COMPANY 


Tripwire®  establishes  a  baseline  of  data  in  its  known  good 
state,  monitors  and  reports  any  changes  to  that  baseline, 
and  enables  rapid  discovery  and  recovery  when  an 
undesired  change  occurs. 

Foundation  for  Data  Security 

■  Ensure  the  integrity  of  your  data 

■  Instant  assessment  of  system  state,  reporting 
“integrity  drifts” 

Maximize  System  Uptime 

■  Eliminate  risk  and  uncertainty 

■  Enable  quick  restoration  to  a  desired  state 


©  Copyright  2002.  Tripwire  and  the  Tripwire  logo  are  registered  trademarks  of  Tripwire,  Inc. 
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constantly  with  business  users.  And 
whenever  we  do  strategic  projects, 
the  teams  are  not  just  made  up  of  IS 
people;  they’re  also  made  up  of 
business  people. 

“So  we’re  working  shoulder-to- 
shoulder  with  someone  from,  let’s 
say,  human  resources  for  payroll 
implementation.  People  from  busi¬ 
ness  and  IS  are  almost  always  in  the 
same  room.  It  creates  an  accelerated 
development  environment.” 

Does  that  get  loud?  “It  can  be.  We  give 


them  personal  space,  but  they  can  in¬ 
teract  easily  with  other  people,  from 
managers  to  analysts  and  business 
people  and  programmers.” 

What  do  you  like  best  about  how  career 
advancement  and  training  are  handled 
at  your  company?  “We  have  a  new 
initiative  called  performance  man¬ 
agement,  where  specific  competen¬ 
cies  are  tied  to  specific  jobs.  We 
also  budget  40  hours  a  year  to 
associates  in  IS  to  achieve  goals  in 
their  personal  development  plan. 


“It’s  also  not  uncommon  for  IS 
people  to  move  into  the  business. 
You’re  not  pigeonholed  into  an  IS 
career  once  you  get  here.” 

What  makes  your  company’s  IT  depart¬ 
ment  unique?  “We’re  recognized  as  a 
strategic  partner  in  the  organization. 
In  order  to  go  anywhere,  you  need  IS 
to  go  with  you.  Another  big  perk  is 
location  —  we’re  right  outside  of 
Columbus  on  a  beautiful  campus, 
with  trees,  ponds,  beautiful  grass,  a 
swimming  pool,  volleyball,  softball 


and  pavilions  for  cookouts.” 

What  aspect  of  work  do  you  look 
forward  to  each  day?  “We’re  always 
building  something  new,  from  the 
smallest  of  projects  to  strategic 
projects.” 

What  aspect  do  you  dread  each  day? 

“The  biggest  one  is  meetings  you 
need  to  go  to,  so  there’s  not  a  lot  of 
‘think’  time.” 

-  Mary  Brandel 
brandets@attbi.com 


Dear  Career  Adviser: 


For  the  past  10  years ,  I’ve  been  a  network  man¬ 
ager  at  a  large  nonprofit  organization,  and  I’ve 
been  contemplating  leaving  for  the  past  year 
or  so.  The  organization  has  offered  me  a  small 
promotion  and  a  title  change  to  “associate  di¬ 
rector  of  computer  information  systems.”  In  the 
for-profit  world,  which  title  has  more  weight: 
network  manager,  associate  director  of  CIS, 
network  director  or  director  of  networking? 

—  LEAVING  SOON 


Dear  Soon: 

The  networking  professional  infra¬ 
structure  isn’t  driven  by  titles  in  the 
for-profit  world,  counsels  Joe  Sabrin, 
executive  vice  president  and  founder 
of  eHire.com  Inc.,  a  New  York-based 
technology  recruiting  firm.  Instead, 
you’ll  need  to  stay  current  with  the 
technologies  that  are  key  to  your  field, 
no  matter  what  type  of  organization 
you’re  working  for.  These  include 
Microsoft  Corp.’s  Active  Directory, 
Microsoft  XP  deployment,  Linux  and 
Cisco  Systems  Inc.’s  Architecture  for 
Voice,  Video  and  Integrated  Data,  as 
well  as  knowing  how  the  Internet 
works  as  a  business  medium. 

Therefore,  attend  online  and  night 
courses  to  ensure  that  you  don’t  be¬ 
come  obsolete  in  the  event  of  a  down¬ 
sizing,  which  is  where  nonprofits 
have  shown  themselves  to  be  quite 
vulnerable  in  similar  economic 
climates  in  the  past. 

Making  a  move  right  now  might  be 


difficult  anyway,  as  most  companies 
are  waiting  to  hire  new  staff  until  cor¬ 
porate  profits  align  with  spending. 

Right  now,  says  Sabrin,  half  the  num¬ 
ber  of  people  are  doing  twice  the  work, 
which,  one  would  reason,  can’t  contin¬ 
ue  indefinitely. 

Hiring  will  start  again  during  the 
summer  of  2003,  Sabrin  forecasts,  be¬ 
cause  many  of  the  improvements  to  IT 
infrastructure  for  Y2k  will  become 
obsolete  next  year  with  the  three-year 
amortization  of  equipment  and  the  end 
of  three-year  leases. 

Dear  Career  Adviser: 

Like  many  others,  my  company  is  in  a 
tight  financial  situation  and  has  delayed 
our  yearly  salary  reviews  for  about  six 
months.  It’s  offering  stock  options  to  em¬ 
ployees  as  an  alternate  form  of  compen¬ 
sation.  The  options  are  redeemable  only 
for  12  months  after  they  are  offered,  and 
then  at  only  25%  per  year  for  four  years. 
Is  this  what  companies  are  doing  now 


and  is  it  a  “good  deal,’’  or  is 
it  just  a  way  to  keep  key 
people  from  leaving? 

—  Long  Shot  in  l.a. 

Dear  Long  Shot: 

Companies  typically  use 
a  four-year  stock  option 
plan  to  attract  employees 
and  often  grant  employees 
additional  options  as  in¬ 
centives,  says  Richard  C. 

Leto,  chief  financial  officer 
at  BeachHead  Group  in 
Millbrae,  Calif.  Generally, 
these  options  follow  the 
schedule  you  have  described:  25% 
vesting  upon  your  first  anniversary  of 
employment,  which  is  also  known  as 
the  “one-year  cliff,”  with  the  remainder 
typically  vesting  over  the  next  three 
years,  either  monthly  or  annually. 
Senior  executives  might  receive  fully 
vested  options  upon  hire  to  replace 
stock  they  are  leaving  behind. 


When  you  become  vest¬ 
ed  in  stock  options,  they 
become  yours  to  exercise 
or  sell  if  you  so  choose.  But 
you  can  also  elect  to  keep 
them  if  you  feel  your  com¬ 
pany’s  worth  is  increasing. 
Generally,  options  termi¬ 
nate,  or  expire,  when  your 
full-time  work  status 
changes.  In  today’s  envi¬ 
ronment,  most  companies 
grant  additional  options 
that  also  follow  the  origi¬ 
nal  four-year  vesting 
schedule  to  give  employees 
another  incentive  to  re¬ 
main  with  the  companies,  says  Oak¬ 
land,  Calif. -based  compensation  con¬ 
sultant  Rick  Van  Zee.  Therefore,  your 
company’s  proposal  is  fairly  typical. 

The  problem,  however,  is  this:  Given 
your  company’s  current  shaky  situa¬ 
tion,  trading  current  cash  compensa¬ 
tion  for  additional  options  can  make 
your  long  shot  even  longer.  I 


V  ASSETS  OF  HARVARD  NET'* 

Multi  Million  Dollar  Valuation!! 


^  (43)  HVAC  Units*  (19)  United  Power  PDU’s 

(13)  UPS  Systems  •  Metropolitan  Copper  Switch  Gear  n 
(155)  Turnstone  Copper  Cross  Connect  Chassis  •  (14)  Larkin  Dry  Coolers 
Equipment  is  located  in  Boston,  MA 


Bidding  will  take  place  online  June  I7-June  2 1,  2002  •  Equipment  will  be 

viewable  onsite  from  June  12-14, 9am-4pm  at  256  Marginal  Street  in  East  Boston  or  by  appointment 


For  further  information  or  to  make  an  appointment  for  inspection, 
,  call  Lance  Surovik:(5 12)  327-9925 

le  conducted  by  '  ' 

:owanAlexander,  llc  f°r  br% 


TO  VIEW  EQUIPMENT,  PHOTOS  &  REGISTER: 

www.cowanalexander.com 


Relational 

database 


Object-oriented 

development 


If  your  back-end  database  isn't  a  good  match  for  your  front- 
end  development,  you  need  a  new  database.  Cache,  the 
high-performance  database  from  InterSystems,  is  a  powerful 
fusion  of  today’s  mainstream  technologies:  objects  and  SQL. 


Every  Cache  object  is  compatible  with  Java,  C++,  ActiveX, 
and  other  rapid  development  technologies.  And  thanks  to 
Cache’s  “Unified  Data  Architecture,”  every  object  class  is 
instantly  accessible  as  tables  via  ODBC  and  JDBC. 


Unlike  Oracle  and  other  relational  databases,  Cache  takes 
advantage  of  its  efficient  multidimensional  data  engine  to 
implement  an  advanced  object  model.  It  doesn’t  try  to  hide  a 
cumbersome  relational  engine  beneath  object-like  wrappers. 


With  no  mapping  or  middleware.  That  means  no  wasted 
development  time.  And  no  extra  processing  at  run  time. 
So  not  only  will  your  applications  be  quick  to  build  or 
adapt,  they  will  run  faster  too. 


InterSystems  f 

£  CACHE 

Make  Applications  Faster 


Download  Cache  for  free  or  request  it  on  CD  at  www.lnterSystems.com/match17 


c  2002  InterSystems  Corporation.  Ail  nghls  reserved.  InterSystems  Cache  is  a  registered  trademark  ol  InterSystems  Corporation. 
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TECHNOLOGY 


THIS  WEEK 


UPS  AND  DOWNS 

Computerworld  takes  a  look  at  how 
its  Emerging  Companies  to  Watch 
in  2002  are  doing  six  months  after 
they  were  named  to  the  list.  Learn 
which  ones  are  thriving  and  which 
are  struggling  to  survive.  PAGE  42 

OPEN  SOURCE  IN 
THE  ENTERPRISE  MIX 

Linux  may  get  all  the  press,  but 
a  wide  range  of  open-source  tools 
and  products  are  now  an  integral 
part  of  many  corporate  IT  projects. 

PAGE  46 


FUTURE  WATCH 


Scientists  are  hoping  to  build  a  vir¬ 
tual  human  being,  organ  by  organ. 
Its  body  parts  would  be  distributed 
in  labs  around  the  country  or  even 
the  world,  but  it  would  work  —  and 
could  be  studied  —  as  a 


single  being. 

PAGE  49 


QUICKSTUDY 

Steganography  is 
the  hiding  of  infor¬ 
mation  within  a 
more  obvious 
kind  of  communi¬ 
cation.  Digital  stega¬ 
nography  involves  the 
hiding  of  data  inside  a 
sound  or  image  file. 
Learn  more  about  the 
technology  in  this 
week’s  primer.  PAGE  52 


SECURITY  JOURNAL 

Security  manager  Mathias  Thur¬ 
man  assembles  his  penetration¬ 
testing  tools  and  puts  a  proposed 
PeopleSoft  application  to  the  test 

PAGE  54 


NICHOLAS  PETRELEY 

The  Fine  Print 


EAD  CAREFULLY:  By  coming  within  proximity  of  this  license 
agreement,  you  or  anyone  who  looks  like  you  agrees  to  be 
bound,  gagged  and  held  accountable  to  the  terms  of  this  End- 
User  License  Agreement,  while  Megaloshaft  Corp.  will  be 
held  harmless  under  any  and  all  circumstances.  In  addition, 


you  agree  to  be  bound  by  additional  license  terms  that 
accompany  any  updates  we  apply  to  this  software  with¬ 
out  your  knowledge. 

1.  Registration:  Megaloshaft  products  won’t  function 
until  the  software  is  properly  registered. 

2.  Statement  of  Privacy:  Any  personal  information  we 
require  is  used  strictly  for  statistical  purposes.  Mega¬ 
loshaft  will  under  no  circumstances  show,  sell,  rent 
or  otherwise  make  available  to  others  any  of  the 
personal  information  we  collect,  such  as  your  name, 
address,  phone  number,  credit  card  numbers,  e-mail 
address,  tax  returns  or  the  VHS  tapes  we  have  of  you 
cheating  on  your  spouse  with  the  neighbor  down  the 
street.  In  order  to  allay  any  fears  about  the  amount 
and  type  of  data  we  require  during  registration, 
Megaloshaft  provides  additional  privacy  insurance. 
Registered  users  can  obtain  our  privacy  insurance 
policy  free  of  charge  with  every  paid  copy  of  our 
customer  database. 

3.  Redefinition  of  Terms:  Megaloshaft  reserves  the 
right  to  redefine  the  terms  of  this  agreement  and 
will  do  so  at  the  first  opportunity.  In  fact,  by  the  time 
you  find  out  where  we  hid  this  document  on  our  Web 
site,  our  per-CPU  license  policy  will  be  in  effect.  By 
the  time  you  get  your  first  bill,  our  per-million-tran- 
sistor  license  policy  will  be  in  effect.  See  Provision  4 
for  details. 

4.  Repay  Audit  Provision:  All  users  who  are  carbon- 
based  —  and  that  means  all  of  you  —  automatically 
and  unconditionally  qualify  for  our  per-million-tran- 
sistor  license  plan.  Under  this  plan,  you 
pay  only  $10  for  every  million  transistors 
used  by  your  company  employees,  their 
Aunt  Tilly  (see  Provision  9)  and  any  of 
their  relatives,  up  to  third  cousins  twice 
removed.  You  are  required  to  audit  your 
computing  resources  each  year  to  calcu¬ 
late  the  average  number  of  transistors  in 
use  per  day.  To  give  you  an  idea  of  how 
this  is  calculated,  the  AMD  Athlon  CPU 
contains  about  37  million  transistors.  A 
digital  watch  contains  a  couple  thousand 
transistors,  depending  on  the  brand. 

5.  Audit  Waiver  Options:  You  may  waive  our 


right  to  obligate  you  to  perform  an  audit  by  purchas¬ 
ing  a  50-year  subscription  fee  for  all  the  software 
you  use,  including  Megaloshaft  products.  Upgrade 
options  are  available  at  extra  cost.  If  you  decline  the 
waiver,  you  can  ease  the  audit  process  by  purchasing 
our  specially  designed  transistor  counting  system, 
which  scans  everyone  who  enters  or  exits  the  build¬ 
ing  for  transistor-containing  devices  such  as  cellular 
phones,  digital  cameras  or  those  greeting  cards  that 
play  tunes  when  you  open  them.  This  system  comes 
with  a  free,  handy  12-gallon  sealed  trash  compart¬ 
ment,  which  we  prepack  with  our  excess  defective 
integrated  circuits,  and  it  even  counts  its  own  tran¬ 
sistors,  the  number  of  which  varies  depending  on 
our  available  stock  of  defective  parts. 

6.  Trustworthy  Crackproof  Initiative:  When  it  comes  to 
a  commitment  to  security,  Megaloshaft  is  second  to 
NONE.  (NONE  is  a  registered  trademark  of  No  Obvi¬ 
ous  Network  Experience  Inc.)  We  assure  you  that 
Megaloshaft  has  taken  every  possible  precaution  to 

. . .  DiS  LiCeNZ  BiN  CRaCk3D  BiE  dA  kInDyG4T3N 
bRiG4dEH  wE  OwN  yOO  dOOdZ! 

7.  Kava:  This  product  may  support  Kava.  Kava  is  not 
ground,  blended,  percolated  or  otherwise  processed 
for  use  in  air  traffic  control  systems,  hospital  devices, 
biological  warfare  weaponry,  doomsday  machines  or 
answering  machines.  We  will  not  be  held  responsible 
if  your  use  of  Kava  fails  to  prevent  a  plane  crash,  an 
X-ray  machine  boiling  your  brain,  a  global  epidemic 
of  jock  itch,  a  black  hole  that  destroys  the  solar 

system  or  your  mother-in-law  visiting 
unannounced.  Why  Spin  Macrosystems 
has  contractually  obligated  us  to  make 
this  frightening  disclaimer  is  beyond  our 
lawyers’  imaginations,  but  we’re  tickled 
pink. 

8.  Penalty:  You  will  be  liable  for  100  times 
the  price  of  this  product  if  you  violate  this 
contract  or  any  undocumented  or  future 
provisions  in  any  way. 

9.  Relative  Terms:  Not  having  an  Aunt 
Tilly  constitutes  breach  of  contract. 

10.  There  is  no  Provision  10,  subject  to 
change. ) 


NICHOLAS  PETRELEY  is  3 

computer  consultant  and 
author  in  Hayward, Calif. 
He  can  be  reached  at 
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It’s  a  dog-eat-dog  world  for  tech¬ 
nology  start-ups.  Computer- 
world's  up-and-comers  for  2002 
have  spent  the  past  seven  months  either  gobbling 
up  new  customers  or  getting  eaten  alive  by  rivals. 
Here’s  a  look  at  how  some  of  our  picks  have  fared 
since  being  named  to  the  list  in  November. 


COUNTERPANE 
INTERNET 
SECURITY  INC. 

REASON  FOR  SUCCESS:  its  early- 
warning  security  system  staves  off  intruders 
and  slashes  staffing  costs. 

LOCATION:  Cupertino,  Calif.; 

WWW-  counterpane,  com 

BUSINESS:  Provides  managed  security 
monitoring  services. 

CUSTOMERS  &  PARTNERS:  Part¬ 
nered  with  DynTek  Corp.  to  provide  man¬ 
aged  security  services  to  state  and  local 
governments.  Teamed  with  Infinitum 
Security  Re.  Ltd.  to  expand  into  Asian 
markets.  Joined  Cisco  Systems  Inc.’s 
AVVID  Partner  Program. 


OBY  DEBORAH  RADCLIFF 

In  the  world  of  IT  security, 
showing  a  return  on  in¬ 
vestment  can  be  an  elusive 
proposition.  But  for  The  Regence 
Group  Inc.,  a  four-state  Blue  Cross/ 
Blue  Shield  insurance  administrator  in 
Portland,  Ore.,  the  payback  from  one 
initiative  was  real  and  fast. 

Since  outsourcing  its  security  event 
monitoring  18  months  ago  to  Counter¬ 
pane  Internet  Security  Inc.,  The  Re¬ 
gence  Group  has  reduced  staffing 
costs  in  its  monitoring  operations  cen¬ 
ter  by  80%.  The  center  watches  over 
the  company’s  200  perimeter  devices, 
600  internal  Windows  NT  servers  and 
some  of  its  mainframes,  says  David 
McLeod,  assistant  director  of  IT  secu¬ 
rity  at  Regence. 

Outsourcing  the  security  monitoring 
function  has  also  completely  eliminat¬ 
ed  intrusions  thus  far,  he  says.  That’s 
pretty  impressive,  considering  that 
Regence  had  145,000  security  events 


that  required  scrutiny  in  the  last  quar¬ 
ter  of  2001  alone. 

“The  FBI  reported  in  January  that 
1%  of  all  attempted  hacks  are  success¬ 
ful,  so  there  should  have  been  some 
breach  of  our  systems.  But  there  hasn’t 
been,”  McLeod  says. 

In  addition  to  being  familiar  enough 
with  the  Regence  network  to  detect 
abnormal  activity,  Counterpane  also 
provides  an  early-warning  system  that 
has  protected  Regence  from  Nimda, 
Code  Red  and  other  destructive 
worms  and  viruses,  McLeod  says. 

Counterpane  does  this  by  correlat¬ 
ing  events  occurring  at  its  client  sites 
located  in  earlier  time  zones  and  alert¬ 
ing  McLeod’s  IT  team  hours  before 
such  malicious  programs  hit  the  West 
Coast.  For  East  Coast  clients,  early- 
detection  information  is  passed  along 
in  real  time  from  client  sites  in  the 
Pacific  Rim  and  other  clients  on  the 
East  Coast. 

Founded  in  1999  by  well-known 
cryptographer  Bruce  Schneier,  Coun¬ 
terpane  has  been  a  company  on  the 
rise,  consistently  scoring  high  marks 
from  analysts  for  its  services  and  chan¬ 
nel  marketing  strategies.  Counterpane 
is  now  reselling  through  vendors  such 
as  VeriSign  Inc.  in  Mountain  View, 
Calif.,  and  Check  Point  Software  Tech¬ 
nologies  Ltd.  in  Redwood  City,  Calif. 
The  company  also  earned  praise  for 
reducing  its  pricing  model  from  a 
starting  point  of  $10,000  per  month  for 
small  networks  —  too  high  for  some 
customers  —  to  $5,000  per  month. 

But  John  Pescatore,  an  analyst  at 
Gartner  Inc.  in  Stamford,  Conn.,  says 
he  questions  whether  a  single-service 
delivery  model  can  sustain  Counter¬ 
pane’s  dominance  in  the  managed 
security  monitoring  market.  Gartner 
predicts  that  the  managed  security  ser¬ 
vices  market,  of  which  monitoring  is  a 
subset,  will  reach  $5.27  billion  by  2005. 

“We  think  a  mix  of  70%  managed 
security  revenues  and  30%  consulting 
revenues  is  what’s  needed  to  succeed,” 
Pescatore  says.  “We  do  give  Counter¬ 
pane  marks  for  its  incident  response 
consulting,  but  those  services  are 
already  wrapped  into  their  fees.  So 
they’re  shortchanging  themselves  by 
not  putting  these  people  into  consult¬ 
ing  delivery.” 

But  according  to  a  2001  report  from 
Giga  Information  Group  Inc.  in  Cam¬ 
bridge,  Mass.,  by  staying  focused  on 
monitoring  services  alone.  Counter¬ 
pane  remains  the  only  vendor-neutral 
company  in  its  category.  And  Counter¬ 
pane’s  channel  customers  can  provide 
the  consulting  services  when  needed, 
adds  Schneier.  I 


REASON  FOR  SUCCESS:  Its  manage¬ 
ment  software  for  ordering  and  sales  chan¬ 
nels  eliminates  data  entry  errors. 


LOCATION:  Redwood  City.  Calif.; 
www.comergent.com 

BUSINESS:  Provides  e-commerce  ca¬ 
pabilities  for  manufacturers  to  sell  prod¬ 
ucts  through  all  channels  and  partners. 

CUSTOMERS  &  PARTNERS:  Seagate 
Technology  LLC,  Castle  Rock  Industries, 
Nissan  North  America  Inc.  and  Choice 
Hotels  International  Inc.  chose  Comer- 
gent’s  Distributed  E-Business  System. 
Comergent  signed  a  development  and 
marketing  agreement  with  Sun  Micro¬ 
systems  Inc.  to  expand  joint  marketing 
programs. 

LATEST  ROLLOUTS:  Added  support 
for  Simple  Object  Access  Protocol  and 
Web  Services  Description  Language  to 
its  Comergent  Network. 


BY  MICHAEL  MEEHAN 
With  more  than  15,000 
items  for  sale,  Symbol 
Technologies  Inc.  discov¬ 
ered  that  its  customers  didn’t  always 
know  how  to  buy  the  right  combina¬ 
tion  of  products. 

“Ordering  errors  would  trickle  into 
the  factory  and  through  our  ERP  [en¬ 
terprise  resource  planning]  systems,” 
says  Judy  Murrah,  vice  president  of 
sales  development  and  systems  at  the 
Holtsville,  N.Y. -based  data  terminal 
and  bar-code  scanner  manufacturer. 
“We  tried  to  fix  it  many  times  over  the 
years,  and  nothing  worked.” 

So  Symbol  hired  KPMG  Consulting 
Inc.  in  McLean,  Va.,  to  help  find  a  solu¬ 
tion.  In  May  2001,  Comergent  Tech¬ 
nologies  Inc.  was  tapped  for  the  seven- 
figure  project,  says  Murrah.  Its  soft¬ 
ware  was  linked  to  a  homegrown,  Web- 
based  catalog,  an  SAP  ERP  system  and 
a  sales  portal  from  Haht  Commerce 
Inc.  in  Raleigh,  N.C.  Murrah  oversaw 
the  six-month  installation,  which 
went  live  in  March. 

“Comergent  has  their  own  connec¬ 
tors,  so  we  just  used  what  they  sup¬ 
plied  us,”  she  says.  “We  really  didn’t 
have  to  build  anything  in  the  middle.” 

Symbol  also  didn’t  have  to  add  IT 
staff,  Murrah  says.  Nontechnical  per¬ 
sonnel  maintain  the  rules  that  govern 
the  software’s  use. 

She  says  Symbol  hasn’t  calculated 

Continued  on  page  44 
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when  it  expects  to  achieve  a  return 
on  investment  for  the  project,  but 
initial  results  indicate  that  the  order 
error  problem  has  been  solved. 

Comergent’s  software  is  Java-based 
and  uses  XML  for  data  representa¬ 
tion,  transformation  and  messaging. 

It  works  with  Unix  and  Windows  NT 
servers,  as  well  as  Java  2  Enterprise 
Edition  and  .Net  applications. 

Louis  Columbus,  an  analyst  at  AMR 
Research  Inc.  in  Boston,  says  Comer- 
gent  has  taken  much  of  the  pain  out 
of  e-commerce  implementations. 

"It’s  probably  the  most  enthusiastic 
customer  base  in  the  sell-side  e-com- 
merce  market  these  days,”  he  says. 

But  these  are  tough  times  for 
e-commerce  vendors,  who  face 
shrinking  deal  sizes  and  wary  cus¬ 
tomers,  Columbus  adds. 

“[Comergent  has]  got  the  inside 
track  to  survivability  because  they 
do  what  they  do  so  well,”  he  says.  I 


O  THE  UPS 

Some  Emerging  Companies  to  Watch  in 
2002  that  have  been  in  the  spotlight  in  the 
past  seven  months. 

EnvoyWorldWide  Inc. 

Bedford,  Mass.;  www.envoyworldwide.com 
BUSINESS:  Offers  customizable  notification 
services  to  establish  interactive  voice  and  text  • 
communications. 

CUSTOMERS  &  PARTNERS:  Electric  Insur¬ 
ance  Co.  chose  EnvoyWorldWide’s  Envoy- 
Xpress  to  automate  its  departmentwide  com¬ 
munications.  Alliant  Energy  Corp.’s  utility  sub¬ 
sidiaries  implemented  EnvoyProfiles  notifica¬ 
tion  service  for  customer  communication. 

CCBN  Inc.,  an  investor  relations  firm,  unveiled 
its  Target  Messaging  and  List  Management  ser-  • 
vices,  powered  by  EnvoyWorldWide.  Has  part¬ 
nered  with  Altio  Inc.  and  AnswerNet  Network. 

Kada  Systems  Inc. 

Charlotte,  N.C.;  www.kadasystems.com 
BUSINESS:  Helps  develop  database  applica-  : 
Lions  on  the  desktop  and  deploy  them  to  Palm 
OS  devices  or  Pocket  PCs.  j 

CUSTOMERS  &  PARTNERS:  Texas  Instru- 
'  nc.  added  enhanced  Java  capabilities  to  : 
one  «>!  is  chip  sets  using  the  Kada  Mobile  Plat-  : 
form,  hada  also  created  alliances  with  Espial 
Group  Inc.,  Softwired  Inc.  and  Metrowerks  Inc.  • 
LATEST  ROLLOUTS:  Created  frameworks  for  : 
Java  2  fviimo  Edition  applications  (Kada  Mobile  • 
Ready  to  C  c(  cze  Implementations).  Designed  • 
a  template  U  Java  developers  to  design,  de¬ 
velop  and  dop'oy  Java  2  Micro  Edition  database  : 


EMPIRIX  INC. 

REASON  FOR  SUCCESS:  fts  Web  moni¬ 
toring  tools  diagnose  performance  problems, 
keeping  e-consnerce  sites  up  and  running. 

«  tc  0  9  9S909000  0  *  9  0  0  «  9  0  0  «  0  ft  9  *  0  »  0  9  9  0  *  0 

LOCATION:  Waltham,  Mass.; 
www.empirix.com 

90009009  0  9000  «00ft009ft90ft  O90«99ft09ft 

BUSINESS:  Provides  test  and  monitor¬ 
ing  tools  and  service  for  voice,  Web  and 
network  applications. 

9000000«0000090000000S0»0**900«0ft0 

MONEY  MATTERS:  Closed  a  Series  C 
financing  round  of  $29  million. 

9090*000090000ft000*00«090  «00C0»0*0 

CUSTOMERS  &  PARTNERS:  China 
Netcom  Corp.  chose  Empirix’s  network 
emulation  product.  Empirix  created  a 
marketing  alliance  with  lxia.com. 

0009000000*0«9ft0»00000000000090000 

LATEST  ROLLOUTS:  Developed  bench¬ 
mark  that  ranks  performance  of  interac¬ 
tive  voice  response  transactions  (Empirix 
Voice  Performance  Index);  developed 
Web  services  testing  tool  (FirstAct  2.0). 


BY  MARC  L.  SONGINI 
Links  that  are  broken. 
Photographs  that  are  mis¬ 
matched  with  the  product 
text  below  them.  Those  are  the  pitfalls 
of  an  unwatched  Web  site. 

For  the  past  two  years,  one  large 
East  Coast  bank  has  steered  clear  of 
those  hidden  traps  by  using  a  testing 
suite  from  Empirix  Inc.  The  tools  en¬ 
sure  that  the  links  on  the  bank’s  Web 
site  are  functioning  properly  and  that 
its  Web  images  are  placed  correctly. 

"I  have  not  looked  at  all  the  tools  out 
there,  but  this  is  an  easy-to-use  tool 
[that]  I’m  comfortable  with,”  says 
Steven  Davis,  vice  president  of  quality 
assurance  for  the  bank’s  e-commerce 
site.  “It’s  easy  to  adapt  it  to  most  any 
Web  site  I’ve  used.” 

Davis  says  the  suite  has  allowed  the 
bank  to  get  its  sites  up  and  running 
quickly  and  reliably. 

Empirix  was  spun  off  in  September 
2000  from  Teradyne  Inc.,  a  Boston- 
based  maker  of  testing  equipment.  It 


boasts  3,000  customers  running  its 
Windows-  and  Unix-based  products. 

The  company  has  a  two-pronged 
product  line,  offering  tools  that  test 
and  monitor  Web  applications  and 
voice  applications  for  call  centers. 

Empirix’s  products  are  well  suited  to 
monitor  complex  Web-based  transac¬ 
tions,  giving  the  company  a  foothold  in 
the  financial  services  sector  and  the 
airline  industry.  American  Airlines  Inc. 
in  Fort  Worth,  Texas,  ranks  among  its 
high-profile  customers. 

Given  that  the  testing  market  is  fair¬ 
ly  mature,  Empirix  has  succeeded  in 
carving  out  its  own  niche  by  combin¬ 
ing  voice  recognition  with  Web  testing 
technology,  says  Theresa  Lanowitz,  an 
analyst  at  Gartner  Inc.,  a  Stamford 
Conn. -based  consultancy. 

Empirix’s  testing  suite  ties  into  San 
Jose-based  NetIQ_Corp.’s  infrastruc¬ 
ture  management  software  and  is  ex¬ 
pected  to  have  an  interface  to  Hewlett- 
Packard  Co.’s  OpenView  management 
suite  later  this  year.  ft 


applications  (Kada  Reference  Applications). 

Kalido  Ltd. 

London;  www.kalido.com 
BUSINESS:  Provides  information  integration 
software  to  support  management  of  mergers, 
acquisitions,  reorganization  and  globalization. 
MONEY  MATTERS:  Announced  2001  revenue 
of  $8.6  million,  following  its  organization  as  a 
separate  company  within  Royal  Dutch/Shell 
Group  of  Cos.  in  February  2001. 

CUSTOMERS  &  PARTNERS:  Cadbury 
Schweppes  European  Beverages  picked  Kali- 
do’s  Dynamic  Information  Warehouse  to  facili¬ 
tate  the  migration  of  Orangina  to  its  own  report¬ 
ing  and  business  intelligence  standards. 

PlaceWare  Inc. 

Mountain  View,  Calif.;  www.placeware.com 
BUSINESS:  Provides  Web  conferencing  ser¬ 
vices  that  enable  businesses  to  conduct  real¬ 
time  interactive  meetings  and  presentations 
over  the  Internet. 

MONEY  MATTERS:  Raised  more  than 
$30  million  in  funding. 

CUSTOMERS  &  PARTNERS:  New  customers 
include  Tyco  Electronics  Corp.,  CUNA  Mutual 
Group,  Deloitte  Consulting,  Bank  One  Corp., 
Webhire  Inc.  and  Peregrine  Systems  Inc.  Place- 
Ware  created  a  technology  and  marketing  al¬ 
liance  with  Microsoft  Corp. 

Surebridge  Inc. 

Lexington,  Mass.;  www.surebridge.com 
BUSINESS:  Offers  application  outsourcing. 

CUSTOMERS  &  PARTNERS:  Customer  base 
reached  500  with  addition  of  Andrx  Corp.,  Ap¬ 


plied  Graphics  Technologies  Inc.,  Bayard  Adver¬ 
tising  Agency  Inc.,  Puma  AG  and  Southeastern 
Library  Network  Inc.  Named  to  PeopleSoft 
Inc.’s  Accelerated  Alliance  Program  of  systems 
integrators. 

Visual  Insights  Inc. 

Naperville,  III.;  www.visualinsights.com 
BUSINESS:  Helps  companies  create  e-busi¬ 
ness  strategies  with  data  visualization  software 
to  analyze  and  present  e-business  data. 
CUSTOMERS  &  PARTNERS:  Teamed  with 
Intel  Corp.  to  deliver  Web  analytics  capabilities. 
LATEST  ROLLOUTS:  Created  Web  analytics 
software  with  a  browser-based  interface  that 
allows  for  the  creation  of  performance  indicator 
views  tailored  to  individual  users  (eBizinsights 
XL  3.5). 

Widcomm  Inc. 

San  Diego;  www.widcomm.com 
BUSINESS:  Provides  wireless  communication 
system  software  and  turnkey  designs  for  all 
wireless  communication  devices. 

CUSTOMERS  &  PARTNERS:  Licensed  its 
Bluetooth  communication  software  suite  for 
Windows  to  Micro-Star  International  Co. 

Signed  an  agreement  with  Cypress  Semicon¬ 
ductor  Corp.  to  jointly  develop  next-generation 
Bluetooth  solutions.  Murata  Manufacturing  Co. 
signed  agreement  to  incorporate  Bluetooth  for 
Windows  communication  software  in  its  prod¬ 
uct  line.  Partnered  with  W-Link  Systems  Inc.  to 
develop  short-range  wireless  products. 

MADE  HEADLINES:  It  was  named  the  first 
member  of  National  Semiconductor  Corp.’s 
Bluetooth  stack  partner  program. 


THE  DOWNS 

:  Emerging  Companies  to  Watch  that  have 

•  faltered  in  the  past  seven  months. 

:  2Roam  Inc. 

:  WHAT  HAPPENED?  November  2001,  board 
:  of  directors  voted  to  shut  down  the  company 

•  and  sell  off  its  assets.  March  2002,  acquired  by 
l  Atlanta-based  Air2Web  Inc. 

:  Altra  Energy  Technologies  Inc. 

:  WHAT  HAPPENED?  October  2001,  sold  off 

•  software  portion  of  its  business  to  New  York- 

:  based  Caminus  Corp.  March  2002,  exited  elec- 

•  tronic  gas-trading  business. 

:  Telenisus  Corp. 

:  WHAT  HAPPENED?  December  2001,  sold 
:  security  management  practice  to  VeriSign  Inc. 

•  January  2002,  sold  assets  and  customer  base 

•  of  hosting  business  unit  to  Servervault  Inc.  in 
:  Dulles,  Va.  March  2002,  sold  security  integra- 

•  tion  and  consulting  services  assets  to  Forsythe 
J  Solutions  Group  Inc.  in  Skokie,  III. 


METHODOLOGY:  Computerworld' s  editorial 
research  team  reviewed  the  100  firms  named 
to  the  Emerging  Companies  to  Watch  2002  list, 
focusing  on  publicly  available  company  and 
industry  news,  press  releases  and  financial 
reports  from  November  2001  to  April  2002. 

The  following  information  was  evaluated: 
growth  (number  of  new  or  large  clients,  head 
count),  financial  performance,  product  news, 
partnerships  with  other  IT  suppliers,  expansion 
and  acquisitions.  Information  evaluated  wasn’t 
limited  to  that  shown  here. 
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Leverage  your  CRM  Investment 


FORTUNE  1000®  companies  now  add  Autonomy's 
technology  to  their  brand  name  CRM  systems  to 
automatically  and  intelligently  process  all  their 
customer  communications,  including  text  and  voice. 
After  all,  customers  don't  talk  to  just  a  database,  they 
mail  and  phone  too.  Find  out  how  companies  are 
adding  Autonomy  intelligence  to  Oracle,  E.piphany, 
PeopleSoft,  SAP,  Siebel  and  other  leading  CRM 
solutions  to  boost  returns  on  their  investment. 


Autonomy  makes  sense  of  human  friendly  information 
such  as  email,  phone  calls,  letters  and  reports;  and  by 
automating  their  handling,  delivers  real  bottom-line 
benefit  to  the  enterprise...  In  an  unstructured  world, 
intelligence  counts. 

Call  us  free  on  1-877-MYAUTONOMY  or  visit  our  website 
www.autonomy.com  to  find  out  how  to  add  power  and 
value  to  your  CRM  application. 


Copyright  ©  2002  Autonomy  Corp.  All  rights  reserved.  Other  trademarks  are  registered  trademarks  and  the  properties  ot  their  respective  owners. 
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A  wide  range 
of  open-source 
tools  have  become 
key  ingredients  in 
corporate  IT  devel¬ 
opment  projects. 

Bv  Mark  Hall 

j 

Like  great  character  actors  sharing 
screen  time  with  a  megastar,  open-source 
tools  seldom  steal  the  limelight  that  shines 
on  Linux.  But  those  tools  often  get  more  ap¬ 
plause  from  users  who  are  putting  them  in 
key  roles  inside  corporate  IT  operations. 

Jeff  Carter,  CIO  at  Omaha  Steaks  Inter¬ 
national  Inc.,  says  he  first  became  interest¬ 
ed  in  open-source  software  last  year  when  the  com¬ 
pany  decided  to  bring  its  Web  site  in-house  and  link 
its  online  shopping  cart  application  to  the  corporate 
database  on  an  IBM  AS/400.  After  a  careful  evalua¬ 
tion,  the  1,800-employee,  privately  held  gourmet 
foods  company  opted  for  MySQL,  a  popular  open- 
source  relational  database  from  MySQL  AB  in  Upp¬ 
sala,  Sweden,  for  its  shopping  cart. 

The  fact  that  the  product  was  free  was  nice,  says 
Carter.  “But  free  that  doesn’t  work  is  of  no  value  to 
me,”  he  says.  What  does  make  open-source  technolo¬ 
gy  valuable  to  Carter  and  others  is  the  access  to  the 
source  code  and  the  broad-based  online  community 
of  software  developers  continually  debugging  and 
adding  features  to  a  slew  of  tools  that  are  used  in  a 
variety  of  IT  projects. 

“I’m  a  huge  advocate  of  open  source  because  the 
developments  to  the  product  are  unlimited  because 
so  many  people  are  working  on  it,”  Carter  says. 

Access  Is  Everything 

Limits  are  what  Jim  Caley  wanted  to  avoid.  The 
senior  systems  engineer  at  Graco  Children’s  Prod¬ 
ucts  Inc.  in  Elverson,  Pa.,  recalls  that  the  company 
needed  to  move  a  materials  billing  application  from  a 
client/server  environment  to  an  intranet.  But  the 


company,  a  division  of  Freeport,  Ill.-based  Newell 
Rubbermaid  Inc.,  ran  into  roadblocks  because  the 
commercial  products  it  had  in-house  didn’t  do  exact¬ 
ly  what  was  necessary,  and  waiting  for  the  vendors  to 
customize  them  wasn’t  practical. 

So  Graco  switched  to  a  trio  of  open-source  tech¬ 
nologies  for  its  application.  The  company  has  built  a 
Web  application  server  using  Java,  Linux  and  the  En- 
hydra  Web  application  server,  formerly  from  Santa 
Cruz,  Calif. -based  Lutris  Technologies  Inc.  (see  box 
below),  says  Caley. 

A  PostgreSQL  database  runs  on  the  server  for  Gra- 
co’s  bill-of-materials  project.  He  calls  the  open- 
source  approach  “a  safety  net,”  but  “not  necessarily 
because  I  have  access  to  the  source  code  personally, 
but  because  the  community  does.”  Nonetheless,  Ca¬ 
ley  has  occasionally  dipped  down  into  the  code.  For 
example,  he  once  had  “to  go  into  [PostgreSQL]  code 
and  fix  a  bug  in  a  [Java  database  connectivity]  driver 
to  suit  my  purposes.”  Because  the  bug  was  peculiar 
to  his  environment,  a  fix  for  a  commercial  product 
may  have  taken  forever,  but  now,  “we  can  have  what 
we  want”  in  a  timely  fashion,  he  says. 

Access  to  code  is  important,  even  if  you’re  not  do¬ 
ing  the  fixes  yourself,  argues  Tig  Kerkman,  systems 


DRAWBACKS 


If  there’s  a  downside  to  corporations  using  open- 
source  technology  today,  it’s  the  volatile  nature 
of  open-source  vendors. 

Caley  says  that  although  the  community  support 
for  open  source  mitigates  the  repercussions  of 
open-source  vendors  going  out  of  business,  it  still 
creates  problems.  For  example,  when  Lutris  Tech¬ 
nologies  dropped  commercial  support  of  Enhydra, 
he  says  users  were  concerned  about  losing  vendor 
sales  and  technical  support  contacts,  which  can  be 
disruptive  during  project  development. 

But  despite  numerous  open-source  companies 
abandoning  commercialized  products  or  going  out 
of  business,  the  open-source  movement  seems  to 
be  gaining  momentum. 

-  Mark  Hall 
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administrator  for  the  city  of  Kenosha,  Wis.  The  city 
uses  the  open  source-based  Evolution  e-mail  and  cal¬ 
endaring  application  on  200  desktops.  Being  able  to 
see  Evolution’s  code,  which  is  built  on  the  Gnome 
open-source  graphical  user  interface  (GUI)  and  is 
sold  by  Boston-based  Ximian  Inc.,  has  helped  Kerk- 
man  locate  problems  and  give  direction  to  Ximian  on 
where  they  may  be  found.  “Because  I  was  able  to 
muddle  through  the  code,  I  could  see  where  the 
problem  might  lie,”  he  says.  As  a  result,  Ximian  was 
able  to  turn  around  a  bug-free  version  to  the  city  in 
less  than  two  weeks,  Kerkman  says. 

One  of  the  more  widely  used  open-source  devel¬ 
opment  tools  is  Tel  (pronounced  “tickle”),  a  power¬ 
ful  scripting  language  that  is  included  in  most  Linux 
distributions  and  supports  other  operating  systems, 
including  Macintosh  and  Windows.  Tel,  originally 
from  Scriptics  Inc.,  is  a  popular  alternative  to  other 
open-source  scripting  languages  such  as  Python  and 
Perl  and,  especially,  to  costlier  commercial  alterna¬ 
tives  such  as  Microsoft  Corp.’s  Visual  Basic. 

“Tel  is  my  first  tool  of  choice  for  most  program¬ 
ming  tasks,”  says  Tom  Poindexter,  principal  consul¬ 
tant  at  Talus  Technologies  Inc.,  a  software  consultan¬ 
cy  in  Denver.  “I’ll  supplement  Tel  with  C  or  C++  as 
needed.”  He  says  Tel  excels  in  the  corporate  world 
for  projects  that  involve  GUI  programming,  XML  de¬ 
velopment,  network  coding  and  test  automation. 
Poindexter  has  also  used  Tel  for  applications  that 
need  access  to  results  from  SQL  queries  and  to  verify 
customer  addresses  against  a  postal  database. 

Another  advantage  of  Tel,  Poindexter  says,  is  that 
“code  of  any  given  application  tends  to  be  10%  to  50% 
the  size  of  an  equivalent  program  written  in  C,  C++  or 
Java.  Writing  less  code  means  making  fewer  errors, 
getting  the  application  done  faster  and  [having] 
less  code  to  maintain.” 


Big  Risk? 

The  track  record  for  vendors  build¬ 
ing  a  business  with  open-source  prod¬ 
ucts  has  been  spotty  at  best.  Many  ven¬ 
dors  have  failed  or  quit  the  open-source 
side  of  the  business.  Financial  success 
isn’t  the  issue,  users  say. 

Poindexter  acknowledges  that  now- 
defunct  Scriptics  was  a  significant  con¬ 
tributor  to  Tel’s  development.  “So,  what 
happens  to  that  tool  you’re  using  when  that 
vendor  closes  shop?”  he  says.  “In  the  Scriptics 
case,  Tel  was  already  free,  so  nothing  was  lost.” 
If  it  had  been  a  commercial  product,  the  tool 
may  have  disappeared  with  the  company, 
Poindexter  adds. 

Caley  says  this  could  have  happened  with 
PostgreSQL,  which  had  been  marketed  com¬ 
mercially  by  Great  Bridge  LLC.  Even  though 
Great  Bridge  closed  last  year,  he  says,  “That 
didn’t  affect  us  at  all.”  In  fact,  Caley  says, 

Graco  has  expanded  its  open-source  ap¬ 
plication  development  with  a  critical 
product  data  management  (PDM) 
system  that  uses  the  popular  Post¬ 
greSQL  and  Enhydra  programs. 

Familiarity  isn’t  the  only  thing 
prompting  more  companies  to  de¬ 
ploy  more  applications  built  with 


open-source  technology.  Cost  is  almost  always  a  big 
part  of  such  decisions. 

Commercial  vendor  pricing  boosts  open-source 
advocates.  “It’s  the  best  opportunity  to  compete 
against  Microsoft  since  the  1980s,”  says  Tom  Adel- 
stein,  chief  technology  officer  at  Bynari  Inc.  in  Dal¬ 
las,  which  offers  open-source  messaging  software. 

In  fact,  Kerkman  says,  if  he  had  to  use  Microsoft 
products,  it  would  have  cost  him  $470  per  desktop 
for  equivalent  features  vs.  $59  for  Evolution.  “We’re 
saving  the  city  tons  of  money,”  he  brags. 

Carter,  who  doesn’t  hesitate  to  pay  for  software 
that  meets  his  company’s  needs,  acknowledges  that 
the  “enormous  prices”  being  charged  by  database 
vendors  “make  open  source  much  more  attractive.” 

Had  Graco  invested  in  a  commercial  PDM  sys¬ 
tem,  Caley  says,  it  would  have  cost  $100,000  to 
$500,000,  depending  on  the  vendor  and 
the  features  included.  Add  to  this  train¬ 
ing,  product  customization  and  ongo¬ 
ing  maintenance  fees,  and  the  cost 
can  quickly  get  to  seven  figures. 

But  by  taking  the  open-source 
route,  Caley  eliminated  those 
upfront  licensing  costs. 

Customizing  the  software 
required  six  months  of 
Caley’s  time,  “and  the 
application  does 
exactly  what 
we  want  it  to 
do,”  he 
says.  I 


MORE  ABOUT  OPEN  SOURCE 

Vendors  may  fail,  but  open-source  programs  live  on, 

QuickLink:  a2150 


Learn  why  corporations  need  open-source  hackers. 

QuickLink:  29394 


What's  Tel  good  for?  An  expert  weighs  in. 
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With  Avaya,  you’re  already  this  close  to  IP  Telephony. 


In  fact,  you  can  use  what's  in  your  own  network.  Now  Avaya,  the  leader  in  voice  solutions, 
has  extended  IP  Telephony  to  an  open  architecture.  So  our  feature-rich  MultiVantage m  ^ 
Software  can  work  with  your  existing  investment,  allowing  you  to  have  Enterprise  Class  IP  | 
Solutions  anywhere  in  your  network.  That  means  you  get  gentle  migration  and  flexible 
deployment  from  the  core  to  the  edge,  or  the  other  way  around.  Learn  how  a  network 
assessment  can  help  you  discover  how  close  you  are  to  IP  Telephony.  Visit  avaya.com/yes 
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virtually  Hi 


Scientists  want  to  create 
distributed  software  that 
re-creates  the  functions 
of  the  human  body. 

By  Jennifer  DiSabatino 


study  how  functions  in  one  part  of  the 
body  impact  others.  Ultimately,  the 
models  could  predict  what  a  chemical, 
virus,  bacterium  or  physical  trauma 
would  do  at  the  cellular,  organ,  system 
and  organism  levels.  Doctors  in  an 
emergency  room  could  see  the  effects 
of  physical  trauma  without  opening  up 
the  body,  and  patients  could  have  drugs 
customized  to  their  body  chemistry. 

_ In  a  setup  similar  to  that  of 

rilTlinr  Human  Genome  Project,  the 

|f  5J  |  out  Virtual  Human  Project  would 
Ul ATpil(§)  divvy  up  computational  respon- 
IIH I  Uli4»  sibilities.  Specialists  at  each 

university  or  laboratory  would 
develop  software  that  represents  a  par¬ 
ticular  organ  and  then  test  what  effect 
different  stimuli  have  on  that  organ. 

Software  for  some  organs  and  func¬ 
tions  would  be  completed  far  in  ad¬ 
vance  of  others.  Development  would 
be  ongoing,  and  there  wouldn’t  be  a 
completed  virtual  human,  but  rather 
an  ever-evolving  model.  That,  com¬ 
bined  with  the  complexity  of  the  pro¬ 
gramming,  dictates  that  the  virtual  hu¬ 
man  must  be  developed  and  run  on  a 
distributed  basis,  DeLisi  says. 

Boston  University  has  already  creat¬ 
ed  a  virtual  cochlea,  the  bones  inside 
the  ear  that  vibrate  in  response  to 
sound  waves  and  translate  them  into 
electrical  impulses  for  the  brain.  And, 
z  DeLisi  says,  scientists  and  program- 
5  mers  will  make  major  progress  in  the 
1  next  year  on  mapping  how  our  sense 
z  of  smell  works  and  re-creating  that  in 
|  software.  Vision  is  expected  to  follow 
over  the  next  10  years  or  so. 


Leave  your  heart  in  San  Fran¬ 
cisco.  And  while  you’re  at  it, 
leave  your  ears  in  Boston,  your 
liver  in  Tennessee  and  your 
lungs  in  Seattle. 

Charles  DeLisi,  who  began  the  Hu¬ 
man  Genome  Project,  is  trying  to  get 
financial  support  for  an  even  more 
awesome  undertaking:  re-creating  in 
software  all  the  physiological  process¬ 
es  of  a  human  being. 

DeLisi,  a  professor  and  director  of 
bioinformatics  at  Boston  University, 
hopes  to  create  a  virtual  human  whose 
organs  will  be  dispersed  among  re¬ 
search  facilities  across  the  country. 

This  is  no  cyborg.  It  would  be  a  dis¬ 
tributed  computer  program  that  uses  al¬ 
gorithms  to  re-create  the  functions  of 
the  human  body,  and  in  particular  to 


Physical  Limitations 

The  virtual  human  would  link  the 
organ  models  over  the  Internet  as  they 
are  created  and  eventually  produce  a 
holistic  picture  of  the  human  organ¬ 
ism.  “It’s  been  done  in  astronomy.  It’s 
been  done  in  molecular  biology.  It’s  not 
been  done  in  physiology,”  DeLisi  says. 

Researchers  say  biological  informa¬ 
tion  about  humans  has  become  too 
specialized,  voluminous  and  dispersed 
to  manage  effectively  without  analyti¬ 
cal  and  interactive  help  from  computers. 

“The  human  has  got  a  wonderfully 
adaptable  brain,  but  the  input  is  slow, 
and  we  get  distracted,”  says  Clay  East¬ 
erly,  a  researcher  at  Oak  Ridge  Nation¬ 
al  Laboratory  in  Oak  Ridge,  Tenn.,  who 
is  also  promoting  the  virtual  human.  “I 


don’t  see  any  way  for  a  human  being, 
or  a  group  of  human  beings,  to  synthe¬ 
size  this  vast  data.” 

While  the  project  has  drawn  some  in¬ 
terest  from  the  government,  academia 
and  industry,  no  one  seems  inclined  so 
far  to  fund  major  parts  of  it.  For  the 
time  being,  the  virtual  human  is  likely 
to  grow  from  relatively  small  efforts, 
such  as  the  virtual  cochlea  project. 

Money  won’t  solve  all  the  problems 
anyway.  Computer  models  are  still  rel¬ 
atively  crude,  and  they’re  narrowly  de¬ 
fined  to  a  particular  reaction  —  in  a 
cell  or  in  an  organ,  for  example. 

The  many-to-many  structure  of  the 
Internet  and  the  use  of  XML  would  be 
the  framework  for  sharing  information 
that  now  exists  in  isolation,  DeLisi  says. 
But  creating  programs  that  accept  input 
from  other  applications  is  a  challenge. 

The  virtual  human  would  require 
integrating  processes  and  software 
across  vastly  different  scales,  from 
molecules  to  whole  organisms.  “I  don’t 
think  we  have  the  foggiest  notion  of 
how  to  go  about  it,”  Easterly  says.  Pro¬ 
gramming  would  have  to  be  done  at 
each  level  —  the  molecular,  cellular, 
organ  and  systemic  —  simultaneously 
and  progress  up  and  down  until  the 
functions  met.  Biological  research 
would  influence,  and  be  influenced  by, 
the  programming  effort. 

The  entire  process  could  take  100 
years  or  more,  especially  since  it  must 
ultimately  include  the  brain.  “That,  I 
think,  is  a  ways  off,”  DeLisi  says.  N 


ONLINE  RESOURCES 

Oak  Ridge  National  Laboratory  Virtual  Human  Project: 
0  www.ornl.gov/virtualhuman/ 

More  descriptions  of  the  Virtual  Human  Project: 

0  www.csm.oml.gov/SC99/VHwall.htmi 
More  on  DeLisi.  who  started  the  Human  Genome  Proj¬ 
ect  and  is  involved  with  the  Virtual  Human  Project: 

0  http://bme.bu.edu/faculty/delisi.html 
Information  about  Kenneth  R.  Lutchen,  another 
professor  involved  in  the  Virtual  Human  Project: 

0  http://bme.bu.edu/faculty/lutchen.html 
University  of  Tennessee  Innovative  Computing  Lab: 

0  http://icl.cs.utk.edu/ 

University  of  Washington  National  Simulation  Re¬ 
source  Facility  for  Circulatory  Transport  and  Exchange: 
0  http://nsr.bioeng.washington.edu/ 


TECHNICAL  IMPEDIMENTS 

For  a  look  at  some  obstacles  to  building  the  virtual 
human,  visit  our  Web  site: 
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With  Avaya  Enterprise  Class 
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featuring  MultiVantage ” 
Software,  start  anywhere 
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At  the  core. 

•  Delivers  up  to  99.999% 
reliability 

•  Scalable  from  20  to 
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At  the  edge. 

•  Survivable  remote  location 

•  Standards-based  distributed 
architecture 

•  Cost-effective  option 
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With  a  specific  workgroup. 

•  First  to  seamlessly  extend 
applications  to  cellular 

•  Takes  applications  to  remote 
and  mobile  workers  for 
greater  productivity 


Learn  how  a  network  assessment  can 
help  you  discover  how  close  you  are 
to  IP  Telephony.  Visit  avaya.com/yes 
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Linux®  ready  with  self-managing  features  for  every  e-business. 

Mi 

Inter-based  /  xSeries™ 

It’s  an  affordable  and  powerful 
combination  of  mainframe- 
inspired  reliability  and  smart 
systems  management  tools. 

UNIX"/  pSeries™ 

Highly  available,  highly  affordable 
and  highly  coveted.  The  pSeries  is 
the  platform  of  choice  for  powerful 
UNIX  and  Linux  solutions. 

■ 

■ 

Midrange  /  iSeries™ 

Brings  easy-to-deploy,  plug  and 
play  e-business  to  your  business. 
Sophisticated  technology  that’s 
easy  to  manage  and  Linux  ready. 

Mainframe  /  zSeries™ 

Maximum  reliability,  maximum  power, 
maximum  flexibility.  Designed  for 
up  to  99.999%  uptime’  to  handle  the 
demands  of  today’s  e-businesses. 
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Omaha  Steaks’  online  sales  have  soared  150%  over  the  last  3  years.  And  with  20%  of  their  sales  conducted  over 
the  Web,  they  required  a  highly  available  server.  Since  deployment,  their  IBM  (©server  iSeries  has  been  rock 
solid  (2  years,  no  unplanned  downtime).  For  a  consultation  with  an  iSeries  specialist,  call  1  800  426-7777  and 
mention  priority  code  102AG006,  or  visit  ibm.com/eserver/omaha 


(iJ)  business  is  ibe.  Ffzy  7b  n/in. 


'Reauires  Parallel  Sysplex- environment.  All  customer-related  numbers  and  results  reported  are  from  customer  sources.  Results  obtained  in  other  customer  environments  will  vary.  IBM.  the  e-business  logo. 
e-business  is  the  game.  Play  to  win.  iSeries.  pSeries,  xSeries,  zSeries  and  Parallel  Sysplex  are  trademarks  or  registered  trademarks  of  International  Business  Machines  Corporation.  Linux  is  a  registered  trademark  of 
Linus  Torvalds.  Intel  is  a  registered  trademark  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  UNIX  is  a  registered  trademark  of  The  Open  Group.  Other  company,  product  and  service 
names  may  be  trademarks  or  service  marks  of  others.  ©2002  IBM  Corporation.  All  rights  reserved. 
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DEFINITIONS 
Steganography  is  the  hiding  of 
information  within  a  more  ob¬ 
vious  kind  of  communication. 
Although  not  widely  used,  dig¬ 
ital  steganography  involves  the 
hiding  of  data  inside  a  sound 
or  image  file.  Steganalysis  is  the 
process  of  detecting  stegano¬ 
graphy  by  looking  at  variances 
between  bit  patterns  and  un¬ 
usually  large  file  sizes. 


BY  DEBORAH  RADCLIFF 

N  ENGINEERING 
firm  suspected 
that  an  insider 
was  transmitting 
valuable  intellec¬ 
tual  property  out  of  its  net¬ 
work.  When  Seattle-based 
forensics  consulting  firm  Elec¬ 
tronic  Evidence  Discovery 
Inc.  (EED)  investigated  the 
case  in  June  2000,  it  couldn’t 
find  the  evidence  on  the  local 
hard  drive.  After  checking 
mail  logs,  however, 
investigators  found 
the  smoking  gun:  two 
e-mails  with  harmless- 
looking  image  attach¬ 
ments  sent  by  an  engi¬ 
neer.  Turns  out,  the  images 
were  hiding  two  of  the  compa¬ 
ny’s  most  precious  engineer¬ 
ing  specifications. 

The  technique  used  to  hide 
the  specifications  inside  im¬ 
age  files  is  a  high-tech  version 
of  a  process  called  steganogra¬ 
phy,  which  has  been  around 
since  the  beginning  of  record¬ 
ed  history,  says  Sayan  Chakra- 
borty,  vice  president  of  engi¬ 
neering  at  Sigaba  Corp.  in  San 
Mateo,  Calif. 


During  the  Roman  Empire, 
he  explains,  secret  informa¬ 
tion  was  tattooed  on  a  mes¬ 
senger’s  shaved  head.  When 
the  hair  grew  back,  the  mes¬ 
senger  was  sent  out  with  the 
secret  message  on  his  scalp 
and  a  decoy  message  in  hand. 

In  the  IT  realm,  steganogra¬ 
phy  replaces  unneeded  bits  in 
image  and  sound  files  with  se¬ 
cret  data.  Instead  of  protecting 
data  the  way  encryption  does, 
steganography  hides  the  very 
existence  of  the  data. 
And  it’s  undetectable 
under  traditional  traffic- 
pattern  analysis. 

There  are  few  legiti¬ 
mate  uses  for  steganog¬ 
raphy,  say  forensics  profes¬ 
sionals.  And  despite  reports 
circulating  about  terrorists 
using  steganography  to  com¬ 
municate  secretly,  experts 
doubt  that’s  the  case. 

“Most  people  study  stegano¬ 
graphy  either  as  an  academic 
discipline  or  a  curiosity,  but  I 
don’t  know  if  even  terrorist 
groups  would  actually  use  it,” 
says  Chakraborty. 

Last  year,  after  reading 
a  USA  Today  article  about 


steganography  and  terrorism, 
Neils  Provos,  a  Ph.D.  student 
in  computer  science  at  the 
University  of  Michigan  in  Ann 
Arbor,  decided  to  do  his  dis¬ 
sertation  on  steganography. 

Provos  developed  detection 
and  cracking  tools  to  analyze 
images  for  signs  of  steganog¬ 
raphy,  such  as  overly  large 
files  and  uneven  bit  mapping. 
He  tested  the  tools  and  then 
used  them  to  compare  2  mil¬ 
lion  images  on  San  Jose-based 
eBay  Inc.’s  Web  site,  which  has 
been  cited  as  a  possible  place 
for  posting  and  retrieving  hid¬ 
den  messages.  Provos  found 
no  cases  of  steganography. 

“Steganography  becomes 
the  focus  of  attention,  dies 
down,  and  then  the  public  is 
all  over  it  again,”  says  Provos. 
“But  it  will  never  be  pervasive, 
because  the  amount  of  data 
you  can  actually  hide  in  the 
images  is  fairly  small.  And  if 
someone  wanted  to  steal  intel¬ 
lectual  property,  it’d  be  easier 
to  copy  the  data  on  a  disk  and 
carry  it  out  in  your  pocket.” 

Even  if  steganography  is 
present,  forensics  experts  pre¬ 
fer  to  start  by  investigating 
less  complex  areas.  But  in 
some  cases,  the  only  evidence 
might  be  hidden  in  image  or 
sound  files,  so  investigators 
need  to  be  aware  of  steganog¬ 
raphy  and  the  tools  used  to 
detect  and  crack  it,  say  experts. 

“It’s  true  that  steganography 
is  very  little  used,  but  we  need 
to  be  aware  of  it  when  doing 
almost  any  forensics  analysis,” 
advises  Kenneth  Shear,  vice 
president  of  technology  and 
law  at  EED.  ) 

STILL  CURIOUS? 

To  learn  more  about  the  ways  stegano¬ 
graphy  might  be  used,  visit  our  Web  site: 

QuickLink:  30130 
www.computerworld.com 

Are  there  technologies  or  issues  you'd  like 
to  learn  about  in  QuickStudy?  Send  your 
ideas  to  quickstudy@computerworld.com 


How  It  Works 


Steganography  strips  less  important  information  from  digital  content 
and  injects  hidden  data  in  its  place.  This  is  done  over  the  spectrum  of 
the  entire  image.  Here’s  one  way  it  could  be  implemented: 

The  following  sequence  of  24  bits  represents  a  single  pixel  in  an  im¬ 
age.  Its  3  bytes  of  color  information  provide  a  total  of  256  different  val¬ 
ues  for  each  color  (red,  green  and  blue)  and  thus  can  represent  a  total 
of  16.7  million  colors.  This  particular  value  displays  as  a  dark  green: 

Byte  1  -  Red  Byte  2  -  Green  Byte  3  -  Blue 

ODODODDO  oDDDDoDD  000DODD0 

Now,  let's  take  11  of  these  pixels  that  represent,  say,  part  of  a 
solid-color  background.  In  the  following  sequence,  the  least  signifi¬ 
cant  (rightmost)  bit  of  each  8-bit  byte  has  been  co-opted  to  hide  a 
text  message  -  the  four  characters  Aha!-  in  ASCII  binary: 

ooDoDooD  0D000D00 

o  o  DODO  o  O  oooDofloD 

Here  are  the  bits  behind  those  11  pixels: 


Pixel  Byte  1  -  Red 

1  oflofloDDo 

2  o  D  o  D  o DD  o 


3  o  D  o □ o DD  o 


7  o  D  o  D  o  DDD 

8  oDoDoDDD 


Byte  2  -  Green 

o  DODD  o  Do 
oDDDDoDD 
oDDDDoDD 


oDDDDoDo 

oDDDDoDD 
oDDDDoDo 
oDUODoi 


Byte  3  -  Blue 

o  o  ODDDDD 


o  o  0DDDD0 


ooo  DDDD o 
o  o  ODDDDD 
o  o  ODDDDD 


o DDDD o 


The  hidden  message  occupies  32  of  those  264  bits  (about  12%) 
and  contains  four  8-bit  bytes.  In  the  diagram,  each  maroon  or  gold  box 
represents  a  bit  that  had  to  be  changed  to  include  the  hidden  message. 
Notice  that  only  14  of  264  bits  (less  than  5%)  had  to  be  changed  and 
only  seven  of  the  11  pixels  were  altered. 

The  two  figures  below  represent  the  11  colored  pixels  we've  been 
manipulating.  The  figure  on  the  left  is  the  original,  unaltered  version. 
The  one  on  the  right  has  been  modified,  as  shown  above.  Can  you 
see  a  difference?  I  can’t  either. 


If  instead  of  11  pixels  we  had  a  300KB  JPEG  file,  we  could  accom¬ 
modate  a  text  message  of  36KB,  or  about  6,000  words. 

-Russell  Kay 


MAYBE  “CUSTOMER  SERVICE” 

SHOULD  BE  MORE  THAN  OWE 

DEPARTMENT. 


When  everyone  focuses  on  customers,  something  amazing  happens:  departments 
communicate,  questions  get  answered,  and  products  keep  moving.  That’s  why  the  mvSAP™ 
Customer  Relationship  Management  solution  links  customers  with  your  complete 
organization.  It  keeps  data  consistent  across  all  touch  points,  and  it’s  the  only  CRM  solution 
that  integrates  with  all  other  business  processes,  so  it  shortens  sales  cycles  and  lowers  costs. 
Which  means  vour  customers  won’t  be  waiting  around  for  good  service;  they’ll  be  too  busy 
getting  it.  For  more  info,  call  800  880  1727  or  visit  www.sap.com 
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Enterprise  Application 
Goes  Through  Wringer 


A  security  audit  calms  Mathias' fears  about  a 

new  Web-enabled  PeopleSoft  implementation 


SECURITY 
MANAGER’S 
JOURNAL fi 


BY  MATHIAS  THURMAN 

During  the  past  few  months, 
my  firm  has  been  in  the 
process  of  implementing 
PeopleSoft  for  managing 
corporate  payroll,  benefits 
and  other  human  resources  functions. 
As  part  of  the  project,  management 
asked  the  information  security  depart¬ 
ment  to  conduct  a  comprehensive  au¬ 
dit  and  penetration  test  against  the 
infrastructure. 

That  makes  sense,  since  the  data  that 

some  of  the  systems  will  con-  - - 

tain  is  sensitive  in  nature. 

We’re  implementing  the  ver¬ 
sion  of  Pleasanton,  Calif.-based 
PeopleSoft  Inc.’s  application 
that  includes  a  Web-based 
front  end  that  talks  to  several 
other  systems.  The  problem 
with  a  Web-based  front  end,  however,  is 
that  it  gives  anyone  with  a  Web  browser 
potential  access  to  the  application. 

The  systems  are  configured  in  a 
three-tiered  architecture  consisting  of 
front-end  Web  servers,  midtier  applica¬ 
tion  servers  and  back-end  databases 
that  house  our  critical  data.  This  in¬ 
cludes  employee  compensation  infor¬ 
mation,  health  care  data  and  personal 
information  such  as  employee  Social 
Security  numbers,  dates  of  birth  and 
dependent  information. 

I’ve  never  before  audited  or  conduct¬ 
ed  penetration  testing  of  a  PeopleSoft 
deployment.  To  me,  however,  the  pur¬ 
pose  of  the  application  is  irrelevant. 
The  process,  methodology  and  mind¬ 
set  are  still  the  same.  The  main  ques¬ 
tions  that  needed  to  be  answered  in¬ 
cluded  the  following: 

■  Can  someone  on  the  public  Inter¬ 
net  gain  unauthorized  access  to  the 
PeopleSoft  infrastructure? 

■  Can  someone  with  legitimate  ac¬ 
cess  exceed  their  authorization  and 
gain  access  to  information  he  shouldn’t 
be  able  to  view? 

■  Can  someone  on  our  internal  net¬ 
work  without  any  level  of  authorization 
gain  access  to  the  infrastructure? 

The  problem  with  audits  of  an  imple¬ 


mentation  like  PeopleSoft  is  that  you 
can’t  just  audit  and  conduct  penetra¬ 
tion  testing  against  the  application 
itself.  The  application  consists  of  net¬ 
work  resources,  servers,  software,  peo¬ 
ple  and  the  interaction  of  all  the  pieces 
to  deliver  the  application  in  an  efficient 
and  secure  manner. 

The  order  in  which  the  audit  and 
penetration  test  is  conducted  is  impor¬ 
tant.  Understanding  the  entire  process, 
interaction  and  flow,  in  my  opinion,  is 
the  primary  and  most  important  step. 

.  ...  You  can’t  rely  on  the  network 
guys  to  determine  correct 
firewall  port  configurations. 
They’re  just  going  to  do 
what  the  application  archi¬ 
tects  ask  of  them.  Nor  can 
you  tell  the  systems  adminis- 
— — ~  trators  how  to  lock  down  the 

systems  properly  without  first  knowing 
how  the  entire  process  works. 

Operation  Overview 

We  first  met  with  the  application 
folks  and  had  them  walk  us  through  the 
entire  system’s  operation.  We  covered 
everything  from  authentication  to  how 
the  Web  servers,  application  servers 
and  database  servers  communicate 
with  one  another.  We  asked  what  ports 
were  necessary  between  each  of  the 
resources  for  proper  operation.  And  we 
asked  about  the  trust  relationships  be¬ 
tween  the  servers. 

Once  we  understood  this,  it  was  that 
much  easier  to  audit  the  access  control 
lists  on  the  firewalls  and  routers.  Un¬ 
derstanding  what  services  needed  to 
run  on  the  system  made  it  easier  to 
audit  the  operating  system  configura¬ 
tions.  Gathering  all  this  information 
was  no  easy  task,  because  there  wasn’t 
one  person  in  each  discipline  who 
knew  everything.  This  information¬ 
gathering  was  the  most  time-consum¬ 
ing  part  of  the  audit.  It  took  over  a  week 
to  get  a  full  understanding  of  the  envi¬ 
ronment  and  trust  relationships. 

Auditing  the  network  devices  and 
individual  systems  was  fairly  straight¬ 
forward.  A  variety  of  open-source  and 


commercial  vulnerability  assessment 
tools  proved  useful  in  validating  the 
integrity  of  the  systems  for  open  ports, 
vulnerable  services  and  general  operat¬ 
ing  system  configuration  errors.  How¬ 
ever,  testing  the  actual  application  itself 
was  another  story. 

Several  applications  are  intertwined 
with  custom-made  scripts  and  applica¬ 
tion  programming  interfaces,  which  let 
the  application  perform  seamlessly  and 
interoperate  with  other  third-party  soft¬ 
ware,  such  as  databases,  middleware 
and  Lightweight  Directory  Access  Pro¬ 
tocol  files.  The  common  security  scan¬ 
ning  tools  that  we  used  for  assessing  the 
systems  and  network  devices  weren’t 
able  to  dive  deep  within  an  application 
to  uncover  programming  and  configu¬ 
ration  errors  in  the  application. 

Favorable  Results 

For  this,  we  turned  to  Santa  Clara, 
Calif. -based  Sanctum  Inc.’s  AppScan. 
This  tool  is  quite  different  from  your 
typical  scanning  tools  in  that  instead 
of  providing  an  IP  address  or  a  net¬ 
work  segment,  the  starting  point  is  a 
Web  page.  The  tool  has  a  variety  of  op¬ 
erating  modes,  ranging  from  fully  auto¬ 
mated  to  interactive.  I  chose  to  go  with 
the  interactive  mode  because  it  lets  me 
mouse-click  my  way  through  the  appli¬ 
cation  as  if  I  were  a  legitimate  user.  At 
any  time,  I  can  stop  and  let  AppScan 
execute  its  automatic  scan.  Under  the 
covers,  AppScan  appeared  to  enumer¬ 
ate  every  Web  page  and  script  it  could 
find  and  then  performed  a  multitude  of 
exploits  to  try  to  take  advantage  of  pro¬ 
gramming  and  configuration  errors  in 
the  Web-based  applications. 

AppScan  was  quite  thorough.  It  enu¬ 
merated  more  than  2,000  Web  pages 
and  discovered  several  configuration 
errors  that  might  have  allowed  a  mali¬ 
cious  user  to  alter  Web  pages. 

The  results  of  our  audit  were  ex¬ 
tremely  favorable.  Other  than  a  few 
misconfigured  Apache  Web  servers 
and  some  firewall  ports  unnecessarily 
left  open,  the  PeopleSoft  architecture 
seemed  fairly  secure. 

Next  comes  my  least  favorite  part  of 
testing:  writing  up  the  final  report.  I’ll 
probably  spend  the  next  few  days  com¬ 
piling  the  results  of  the  penetration 
testing  and  architecture  review. 


SECURITYDISPATCHES 

The  Open  Scanning  Option 

Commercial  programs  such  as  App¬ 
Scan  aren’t  the  only  game  in  town.  Here 
are  two  useful  open-source  (read:  free) 
software  tools  for  security  projects: 

The  Open  Web  Application  Security 
Project  (OWASP)  builds  open-source 
application  security  tools,  including  the 
Web  Scarab  vulnerability  scanner.  The 
organization  also  just  released  a  useful 
document  titled  “OWASP  Guide  to 
Building  Secure  Web  Applications  and 
Web  Services,”  which  should  be  helpful 
to  those  developing  Web  applications. 
You’ll  find  both  at  www.owasp.org. 

From  Houston-based  BindView  De¬ 
velopment  Corp.’s  Razor  security  Web 
site  comes  Vlad,  a  security  scanner  that 
checks  for  the  common  vulnerabilities 
defined  in  the  SANS/FBI  Top  20  security 
threats  list  from  the  SANS  Institute  in 
Bethesda,  Md.  Download  the  tool  at 
http://razor.bindview.com/tools/vlad/ 
index.shtml. 

AppShields  on  Full 

Version  4  of  Sanctum’s  AppShield  Web 
application  firewall,  released  in  April, 
has  an  intuitive  user  interface  that 
makes  it  suitable  for  rapid  enterprise 
deployments,  according  to  a  recent 
Information  Security  Magazine  review. 
But  users  who  need  serious  developer 
hooks  may  want  to  look  elsewhere.  For 
details,  visit  www.infosecuritymag.com/ 
2002/may/bulletproof.shtml. 

10  More  Reasons  to  Worry 

The  SANS  Institute  recently  added  10 
items  to  its  SANS/FBI  list  of  top  security 
vulnerabilities.  Visit  the  SANS  Web  site 
at  www.sans.org/top20.htm. 

Security  Site  of  the  Week 

Dozens  of  security  sites  are  on  the 
Web,  but  not  all  are  useful  or  well  orga¬ 
nized.  The  Church  of  the  Swimming  Ele¬ 
phant  has  an  odd  name,  but  it’s  cleanly 
designed  and  organized,  advertising- 
free  and  up  to  date  with  the  latest  news. 
Check  it  out  at  w'ww.cotse.com. 


Have  you  had  experience  auditing 
a  major  enterprise  application?  If  so,  I 
welcome  your  suggestions  in  the  Secu¬ 
rity  Manager’s  Journal  forum.  I 


This  week's  journal  is  written  by  a  real  security 
manager.  "Mathias  Thurman,"  whose  name  and 
employer  have  been  disguised  for  obvious  reasons. 
Contact  him  at  mathiasJhurman@yahoo.com,  or  join 
the  discussion  in  our  forum. 

QuickLink:  a1590 

To  find  a  complete  archive  of  our  Security  Man¬ 
ager's  Journals,  go  to  our  Web  site: 

O  www.computerworld.com/sjm 


Supplier  Intelligence  |  Organizational  Intelligence  |  Customer  Intelligence  |  Intelligence  Architecture  |  Enterprise  Intelligence 


How  do  you  extract,  transform  and  m 
load  data  while  assuring  quality? 

Build  a  scalable  data  warehouse  a 
with  a  single  point  of  control? 

And  simplify  the  way  you  create  n 
and  customize  enterprise  reports? 


SAS  is  all  you  need  to  know. 


Only  SAS  provides  a  high-impact,  low-risk  way 
to  achieve  intelligent  data  warehousing.  You  can 
surface  information  from  any  source  -  corporate 
systems,  e-business  channels,  your  supply  chain 
and  beyond -across  any  platform.  And  deliver  a 
shared  version  of  the  truth  throughout  your 
enterprise.  To  find  out  how  top  companies  reap 
bottom-line  rewards  with  SAS  software,  call  toll  free 
1  866  270  5727  or  visit  www.sas.com/warehouse 


The  Power  to  Know,,. 


SAS  and  all  other  SAS  Institute  Inc.  product  or  service  names  are  registered  trademarks  or  trademarks  of  SAS  Institute  Inc.  in  the  USA  and  other  countries.  ®  indicates  USA  registration.  ©  2002  SAS  Institute  Inc.  All  rights  reserved  50046US.0502 
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Diversity  Job  Fair 
Online  at 

www  .PIC  KDiversity .  com 
June  11-18,  2002 

Log  in  to  your  new  career 
Your  Future  Starts  Here! 


Sponsored  By:  £ 


Who’s  Hiring?  cjnT£kWr,niin  WeUMa,i< 
Financial  Group  EXCEL/Cargin 

NOVELL  DaimlerChrysler  STARBUCKS 

Raytheon 

Panasonic  Washington  Mutual 

Federal  Express  CVS/PHARMACY 


Peoples  oft 
Consulting 

Allstate 

DesMoines 

Partnership 

AND  MORE! 


It's  like  having 

the  i nsi de  track  on 

all  the  hottest  tech  jobs, 

all  the  time. 
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The  hottest  job  leads  you  can’t 
:  find  anywhere  else  are  all  right 
here.  That’s  because  Dice  is  all 
tech  jobs,  all  the  time.  Get  the 
■inside  track  on  the  best  tech 
jobs.  Go  to  dice.com  today. 
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The  World 
Of  Work  Is 
Changing 
Every  Week. 


Luckily,  We  Are  Too! 

For  the  most  up  to  date 
opportunities  and  coverage, 
stay  tuned  in  with  us. 
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NetworrWorld, 

COMPUTERWORLD, 
AND  INFOWORLD 

Help  You  Do 
A  Better  Job. 

Now  Let  Us  Help 
You  Get  One. 

Call: 

1-800-762-2977 

(ft  careers.com 


Sr.  Systems  Analyst  wanted  by 

NJ  based  Co  for  job  loc  through¬ 
out  the  US.  Must  have  Bachelor's 

degree  in  Comp.  Sc.  or  Engg.,  2 

yrs.  of  s/ware  exp.  &  proficiency 

with  Linux,  Telecom  &  network 

security  protocols,  Firewalls, 

VPN,  SMS.  Respond  to:  Atinav, 

Inc.,  100  Franklin  Sq.  Dr.,  Ste. 

#304,  Somerset,  NJ  08873.  (Ref. 

GG  8244).  No  phone  calls. 

Systems  Administrator  wanted 
by  Home  Care  agency  in  Elk 
Grove  Village,  IL.  Reqd:  Bachelors 
in  Computer  Science  or  Elec¬ 
tronics  or  Communications 
Engineering.  Send  resumes 
to:  HR,  Caring  Home  Care 
Services,  Inc.,  1881  Commerce 
Drive,  Unit  107,  Elk  Grove 
Village,  IL  60007.  No  calls 
please. 

Programmer  wanted  by  Financial 

Software  &  Systs  Dvlpr  in  MA. 

Dvlp  &  maintain  testing  proce¬ 
dures;  doc  on-line  ref  materials; 

provide  in-house  customer  sup¬ 
port;  write  functional  specs  for 

programming;  dvlp  new  systs. 

BS  in  Comp  Sci  &  2yrs  exp  in  job 

offered  req.  Respond  to:  Office 

Mngr/SunGard,  2  Adams  PI,  4th 

FI,  Quincy,  MA  02169. 

PROGRAMMER/ANALYSTS 
wanted  by  hardware/software 
co.  in  Houston.  Must  have 
degree  8  exp.  Respond  by 
resume  only  to:  Mr.  S.  Ryu,  J/H 
#10,  Computize,  Inc.,  1008  Wirt 
Rd.,  Ste  #150,  Houston,  TX 
77055. 

Programmer-Analyst/DBA  to 
design,  analyze,  develop,  code, 
test,  optimize,  implement,  & 
provide  user  support  for  various 
applications  using  VBScript, 
JSP,  Java  and  HTML.  Design  8 
create  Oracle  8  tables,  triggers, 
databaselinks,  constraints,  in¬ 
dexes,  and  PL/SQL  stored 
procedures  and  packages.  Work 
with  Windows  NT,  Unix,  Oracle 
Discoverer  8  MS  Access  2000. 
Reqd:  B.S.C.S.  8  5  yrs  Exp.  M-F, 
40  hrs/wk.  Freq.reloc.  within  the 
US  may  be  necessary.  Resume 
to  J.  Brigham,  HR  #061002,  , 
6992  Columbia  Gateway  Dr., 
Columbia,  MD  21046. 

Program'rs/Analysts:  Analyze, 
plan,  devlp  &  test  sw  applic'ns 
for  cable  communica'n  industry; 
Evaluate  user  request  to  program 

8  modify  applica'n  w/VC++, 

JDK1.2,  Corba,  AnsiC++  on 
PowerTV/NT  Platform.  40h/w, 

8-5,  BS  or  foreign  equival't  8 

1  -yr  wk  exp  in  any  position 
involv'g  JDK1.2  8  PowerTV. 
Resume  to  J.  Bhasin,  Itaas,  Inc. 
4530  S.  Berkeley  Lk  Rd.  #A, 
Norcross,  GA  30071/email: 
jaspal. bhasin  @  itaas.com 

Systems  Analyst  wanted  by  NJ 

based  Co  for  job  loc  throughout 

the  US.  Must  have  Master's 

degree  in  Comp.  Sc.  or  Engg.,  2 

yrs  of  s/ware  exp.  8  proficiency 

with  Bluetooth,  UPnP,  JDBC, 

JAVA  8  Visual  Basic.  Respond 

to:  Atinav,  Inc.,  100  Franklin  Sq. 

Dr.,  Ste  #  304,  Somerset,  NJ 

08873.  (Ref.  GG  8208).  No 

phone  calls. 

Software  Engineer  wanted  w/BS 

8  2  yrs.  exp.  in  San  Jose,  CA. 
Send  resume  to:  HR  Dept,  Scicom 
Americas,  Inc.,  1500  S.  Dairy 
Ashford,  Ste  241 ,  Houston,  TX 
77077 

Systems  Analyst/Programmer 
wanted  by  Software  Dvlpmt  firm 
in  Bklyn  to  dvlp  8  upgrade 
s/ware  apples.  Bach  degree 
req'd.  Respond  to:  A-Plus 
Systems,  Inc.,  6604  Bay  Parkway, 
Brooklyn,  NY  11204. 

Several  computer  related  posi¬ 
tions  available  for  large  trans¬ 
portation  and  logistics  services 

company.  Degree,  technical  skills 

8  experience  vary  per  positions. 

Send  resume  to:  vivianirizarrv 

@  uns.com  or  United  Parcel 

Service,  P.O.  Box  833,  Mahwah, 

NJ  07430,  Attn:  Vivian  Irizarry, 

A-563,  Ref.  #1 .  Employer  will  not 

sponsor  visas  for  position. 

where  the  best  get  better 


1-800-762-2977 


A  high-tech  company  is  seeking 
the  fllwing  Software  Engineers 
who  will  collaborate  in  the 
research,  design  8  development 
of  next-generation  storage  net¬ 
work  systems.  Req'd: 

Software  Engineer  #1 :  Master's 
in  CompSci.  Min  1  yr  exp  as 
Software  Engineer/Researcher. 
Must  have  research  and/or  project 
exp  w/Active  Networks  &  network 
programming.  REF#20065-1 
Software  Engineer  #2:  Master's 
in  CompSci.  Min  1  yr  exp  as 
Software  Engineer/Researcher. 
Must  have  research  and/or 
project  exp  w/design  &  develop¬ 
ment  of  IP  protocol  stacks. 
REF#20065-2  Software  Engineer 
#3:  Master's  in  CompSci.  Min  1 
yr  exp  as  Software  Engineer/ 
Researcher.  Must  have  research 
and/or  project  exp  w/network 
security  8  access  control  in  IS. 
REF#20065-3 

Send  res.  to:  Anne  Budowsky, 
Nextorage,  Inc.,  520  8th  Ave., 
21st  FI.,  NY,  NY  10018.  PLS 
INDICATE  REF#. 


SOFTWARE  CONSULTANT 

Analyze  &  evaluate  existing  or 
proposed  software  systems. 
Dsgn,  dvlp,  implmnt  and  improve 
programs,  systems  and  related 
procedures  to  process  data  using 
in-depth  knowledge  of  the  soft¬ 
ware  dvlpmnt  life  cycle.  Encode, 
test,  debug  and  install  operating 
programs  and  other  system 
software  utilizing  knowledge  of 
RDBMS  environments  and 
PowerBuilder.  B.S.  degree  or 
equiv.  in  Comp.  Sci.,  Comp.  Sys., 
Math,  Engnrng,  Bus.  or  Com¬ 
merce  +  2  yrs  of  exp.  in  position 
offered  or  as  a  Prog.  Analyst, 
Sys.  Analyst  or  Soft.  Engnr  reqd. 
Exp.  must  incl:  a)  Oracle,  Sybase 
or  SQL  Server;  and  b)  Power¬ 
Builder.  High  mobility  preferred. 
40  hrs/wk,  8  am  -  5  pm,  OT 
as  reqd,  $61,000/yr.  Qualified 
applicants  please  submit  resume 
to  Manager,  Washington  County 
Team  PA  CareerLink,  Millcraft 
Center,  Suite  150LL,  90  West 
Chestnut  Street,  Washington,  PA 
15301-4517.  Refer  to  Job  Order 
No.  WEB249035. 


Business  8  Information  Systems 
Administrator.  Administer  and 
manage  company  information 
structure.  Perform  all  IS  related 
functions.  Support,  maintain, 
and  enhance  current  JD  Edwards 
ERP  system  to  achieve  business 
strategies  and  objectives.  Create, 
maintain,  and  distribute  business 
reports  from  ERP  system.  Design 
and  maintain  company  custom 
software.  Oversee  and  perform 
all  IT  related  functions.  Position 
is  located  in  York,  Nebraska.  B.S. 
degree  req’d  (or  equiv.  education 
or  experience)  w/  major  in 
Comp.  Sci.  or  related  field.  5  yrs 
of  experience  req’d.  Must  have 
proof  of  legal  authority  to  work  in 
the  United  States.  Send  resume 
to  Joe  Kardos,  15159  Andrew 
Jackson  Hwy  76  West,  Fair  Bluff, 
NC,  28439.  This  advertisement 
is  paid  for  by  the  employer. 


Authorware  Dev/Senior:  Work 
w/pioneer  in  field  of  applying 
computer  technology  to  work¬ 
force  training  in  North  Jersey, 
standard  benefits  +  tuition 
reimb..  no  pd.  relocation.  Code 
Macromedia  Authorware  (v  3.5+) 
proj.,  convert  &  add  changes  for 
existing  proj.  to  highest  version 
of  s'ware.  Prgm.  extensions  to 
incl.  missing  functions,  use  MS 
Visual  C/C++  Developer  Studio 
on  Windows  interface  to  prgm. 
critical  functionality  unavailable 
in  Authorware.  compile/draft/ 
maint.  s'ware  doc.  Must  demon¬ 
strate  working  knowledge  w/Au- 
thorware  dev.  environ.  &  pgrmmg. 
Principals  only  reply  to  Dept.  DP, 
ISI  Inc.,  411  Flackensack  Ave., 
Cont.  Plz  II,  Flackensack.  NJ 
07601 . 


Advantecs  has  openings  for 
application  developers  for  main¬ 
frame  and  Database  administra¬ 
tors  for  Oracle/DB2  for  its  various 
locations  in  US.  Must  have  at 
least  5  years  experience  in  the 
following  areas: 

Mainframe  Application  Developers: 
Exp  in  online/batch  programming 
using  COBOL,  JCL,  CICS,  DB2 
&  VSAM.  Must  have  problem 
solving  exp  in  using  mainframe 
debugging  tools.  Exp  in  pro¬ 
gramming  client  server  applica¬ 
tions  with  mainframe  as  server  a 
big  plus. 

Oracle  /  DB2  DBAs:  Exp  in  set¬ 
tling  up  and  supporting  produc¬ 
tion  in  Oracle/DB2  environment. 

All  the  positions  require  good 
analysis,  problem  solving  and 
communication  skills.  Some 
positions  also  require  Bachelor’s 
degree.  Others  require  Master’s 
degree,  equivalent  degree  and 
experience  s  also  accepted. 
Excellent  pay  and  benefits. 
Please  indicate  the  position 
applied  for.  Mail  resume  to  FIR 
Dept,  Advantecs  Group  Inc, 
1430  Oak  Tree  Road,  Suite  F, 
Iselin,  NJ  08830. 


Computer  Professionals  (Multiple 
Positions)  w/exp  in: 

Cobol,  DB2,  CICS,  IMS,  MVS, 
JCL,  ERWin,  Delphi,  NFS.  NIS. 
DHCP,  HACMP,  Raid  Arrays, 
Pro*C,  C,  C++,  VC++,  HTML, 
Perl,  Veritas  Volume  Manager, 
Bourne,  K  Shell,  Java,  Java 
Script,  ASP,  Corba,  EJB,  JSP, 
Swing,  AWT,  Weblogic,  Web¬ 
sphere,  Servlets,  COM/DCOM, 
IIS,  EDI,  .Net,  Active 
X,  AIX,  WinRunner,  Peoplesoft, 
Peoplecode,  Veritas,  Sun  Cluster, 
NetBackup,  HP  Open  View 
backup, Linux,  Unix,  HP-UX,  AIX, 
DOS.  Windows  NT,  VAX/  VMS, 
VB,  PB,  Sybase,  PL/SQL,  T- 
SQL,  ODBC,  JDBC,  MS  SQL 
Server,  SQL’Plus,  SQL’Loader, 
Oracle,  Datawarehouse,  Forms, 
Reports,  Oracle  DBA,  Oracle 
RDBMS,  Dynix/Ptx,  Oracle  Apps 
(GL,  AP,  AR,  OE,  BOM,  PO,  HR, 
INV)Oracle  Financial  Applic., 
Oracle  Designer,  MS  Access, 
Excel,  Cisco  Router,  Windows 
NT,  DOS,  Sun  Solaris  Cluster, 
Sequent  Server,  Aries  Servers, 
Sun  Solaris  system  &  Network 
Admn.,  SUN,  SUP  Servers,  ACL, 
TCB,  Developer  2000,  Designer 
2000,  Rational  Rose,  Numega 
bounds  Checker,  True  Coverage, 
True  time,  OOAD,  MFC  library, 
SEI-CMM,  ERWin  and  related 
tools.  Apply  to:  STG,  Inc.,  3340 
Peachtree  Road,  Suite  #1800, 
Atlanta,  GA  30326. E-mail: 
itresumes@stail.com 


Applications  Developer  (Norcross 
GA)-  Research/design/analyze/ 
develop  software,  write  instructions 
using  C/VB/JavaScript/Win 
Runner/P  LVSQLV  Apache/HTML/ 
MS  Visual  Studio/source  control 
tools/Object-oriented  program. 
&  tech.  &  MS  SQL.  Bachelor's 
degree  or  foreign  equiv.  in  CS, 
MIS,  CIS,  Engineering,  or  related 
req'd.  Must  be  proficient  in 
C/VB/JavaScript/WinRunner/PL/ 
SQL  /Apache/HTML/  MS  Visual 
Studio/source  control  tools/ 
Object-oriented  program.  &  tech. 
/MS  SQL.  $57,750/yr,  40+  hrs/ 
wk,  OT  as  need.  Send  resume 
to:  M.  Powers,  HR  Adm., 
REF#SN,  CoreCARD.1  Meca 
Way,  Norcross,  GA  30093. 


ERG  is  looking  for  Dir  of  Devel¬ 
opment/Info  Systems  to  estab 
8  run  technical  teams  for  MS 
Great  Plains  (MSGP)  Value 
Added  applic.  Must  know  basic 
acctng  principles  8  tech,  needs 
of  acctng  firms.  Customize  solu¬ 
tions  using  MSGP  Dexterity.  Assist 
project  mgrs  in  systm  dsgn,  incl 
General  Ledger.  Receivables  8 
Payables.  Recruit  staff  &  run 
wkly  meetings.  Manage  tech.  8 
prof  dev.  BS  in  Comp  Info  Sys 
or  related  field.  Min  5yr  exp. 
Certified  MSGP  Dexterity  Engi¬ 
neer  or  proven  exp  w/Dexterity. 
Salary  based  on  exp.  Resume  to 
ERG,  3430  American  River  Dr., 
Ste  200,  Sacramento,  CA  95864 
or  email  ckaeser® enterprise 
resource.com  Attn.  Janet  Kaesar. 
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Mercury  Interactive  Corporation 
is  the  world's  leading  provider  of 
solutions  that  automate  testing, 
quality  assurance  and  applica¬ 
tion  pedormance  management 
fore-business,  enterprise  resource 
planning,  and  client/server  ap¬ 
plications. 

We  currently  have  exciting 
opportunities  available  in  our 
Sunnyvale,  CA  headquarters, 
as  well  as  various  locations 
throughout  the  US,  for  the 
following  positions  (all  levels/all 
types): 

•  Software  Engineers 

•  Systems  Analysts/Engineers 
(Consultants) 

•  Network  Engineers/Unix  Ad¬ 
ministrators 

•  Database  Administrators 
•Technical  Support  Engineers 

Please  send  resume  to  Mercury 
Interactive  Corporation  with  cover 
letter  to  Human  Resource  Dept, 
fax:  408-822-5514  or  email  your 
resume  to  jobs@merc-int.com. 
For  additional  information  on 
these  and  other  positions,  visit 
our  web  site  at  www.mercurv 
interactive.com.  Mercury  Inter¬ 
active  Corporation  is  an  equal 
employment  opportunity  employer 
committed  to  the  development  of 
a  diverse  workforce 

%i. 

MERCURY  INTERACTIVE 


Senior  Software  Engineer 

Utilizing  Tibco,  MSMQ,  JMS 
to  develop  message-driven  dis¬ 
tributed  system  for  commodity 
pricing  information;  develops 
various  user  interiaces  including 
Java  Swing.  HTML,  C#  and 
VB/VB.NET  technologies  and 
implement  3rd  -party  software 
packages  for  energy  trading  risk 
management  system.  Requires 
master  degree  in  computer  science 
or  related  area;  2  years  exp.  with 
energy  trading  risk  management 
system  including  knowledge  in 
financial/physical  trading,  common 
financial  instruments  and  related 
commodities;  2  years  exp.  with 
distributed  system  architecture 
and  client/server  architecture 
applying  Tibco  ActiveEnterprise, 
RMI,  EBJ,  MSMQ  and  Web 
application  development  applying 
HTML,  and  ASP/ASP.NET;  3 
years  programming  experience 
using  Java,  C/C++,  VB,  Oracle, 
MSSQL  and  XML.  Send  resume 
to:  Maximi  Consulting,  Inc.  7019 
Lawler  Ridge,  Houston,  TX 
77055.  Attn:  Mr.  Liu. 


Applicant  sought  for  position  in 
Huntersville,  North  Carolina  as 
Senior  Project  Manager  in  Digital 
Technology  and  consulting  ser¬ 
vices  to  perform  the  role  of  a 
technology  architect  for  a  B2B, 
B2C,  and  technology  solutions 
that  uses  the  Sun  Java  as  the 
core  development  program.  This 
includes  designing  the  N-Tier 
architecture  and  the  solution 
components  for  the  client. 
Includes  the  ability  to  understand 
business  processes  and  client 
requirements  from  a  functional 
view  and  to  translate  them  into  a 
technology  framework.  Includes 
the  ability  to  understand  im¬ 
provements  in  technology  in  this 
fast-paced  world  and  to  incorpo¬ 
rate  the  changes  to  enhance  the 
existing  solution  to  maintain  the 
competitive  advantage.  Manage 
projects  according  to  client 
needs.  Leads  a  team  in  imple¬ 
menting  WEB  development  busi¬ 
ness. 

Education:  BS  in  Engineering 
or  Computer  Science  plus  5 
years  experience  in  related 
fields.  Excellent  verbal,  written, 
presentation,  training  technical, 
and  customer  relationship  skills 
are  required.  Strong  interper¬ 
sonal  and  communication  skills 
are  essential. 

Forward  resume  to: 

Genevieve  Dorneles 
Human  Resources 
Intiqua  International  Inc. 

45  Broadway,  1 9th  Floor 
New  York,  NY  10006 


Senior  Programmer  Analyst. 
Student  information  database 
programming,  analysis  of  user 
needs  based  on  Datatel  Colleague 
information  system.  Analyze, 
develop  web  pages  using  Cold 
Fusion  and  other  programming 
tools.  Develop  needed  databases. 
Required  knowledge  and  expe¬ 
rience:  Unidata  query  statements 
to  select  data  from  Datatel 
Colleague  Release  17  SIS  Data¬ 
base.  Download  info  resulting 
from  queries.  Work  with  diverse 
clientele  to  design,  implement 
web  intedaces  for  delivery 
and/or  collection  of  information. 
Develop  Cold  Fusion  apps  using 
SQL  to  access  and  maintain 
data.  Write  Java  and  Java  Script 
to  support  Cold  Fusion  apps  with 
client  side  logic.  Develop  and 
maintain  MS  Access  databases, 
MS  Visual  Basic  and  SAS  pro¬ 
gramming.  Base  Salary  $32,802 
per  1 2  months  plus  fringe  benefits. 
Send  two  copies  of  letter  of 
application  and  resume  to:  South 
Dakota  One-Stop  Career  Center, 
Attn:  Laura  Hoyt,  1310  Main  Ave 
S,  Suite  103,  Brookings,  SD 
57006.  Telephone:  (605)  688- 
4350.  Fax:  (605)  688-6761  Must 
refer  to  Job  Order  Number 
SD1 199271. 


Richmond,  Virginia  law  firm 
has  an  opening  for  a  Senior  Web 
Developer. 

The  successful  candidate  will 
build  software  applications  to 
provide  the  technical  architecture 
of  Web  sites  or  Web-based  soft¬ 
ware  products.  Responsibilities 
include  gathering  feedback  from 
design  and  technical  staff  on 
development  needs;  building 
user  interface  applications  and 
back-end  databases;  authoring 
complex  Web  pages;  assisting  in 
project  planning  and  Web  site 
design;  creating  prototypes  and 
functional  specifications  for 
software  projects;  and  creating 
technical  methodologies  for 
engineering  solutions  to  Web 
development  problems.  Addition¬ 
ally,  the  Senior  Web  Developer 
will  meet  regularly  with  other 
information  technology  personnel 
on  specifics  of  projects  and 
deadlines;  and  will  offer  guidance 
on  new  Web  technologies  to  utilize, 
such  as  browsers,  languages, 
and  plug-ins. 

Requirements  for  this  position 
include  a  Bachelors  Degree  in 
Information  Systems,  Computer 
Science  or  Mechanical  Engi¬ 
neering  (or  foreign  equivalent) 
and  5  years  of  progressively 
responsible  experience  using 
VBScript,  JScript,  HTML,  ASP, 
JAVA,  SQL  and  other  program¬ 
ming  and  scripting  languages; 
the  ability  to  conceptualize  and 
plan  long-term  needs  of  Web 
Development  and  to  manage 
related  projects. The  ideal  candi¬ 
date  will  have  excellent  oral  and 
written  communication  skills; 
leadership  and  project  manage¬ 
ment  experience,  and  the  knowl¬ 
edge  level  to  make  suggestions 
regarding  Web-based  technical 
standards  for  specific  Web  sites 
and  the  Firm  as  a  whole. 

Interested  candidates  should 
submit  a  resume  to:  McGuire 
Woods  LLP,  HR  Recruiting 
Manager,  One  James  Center, 
901  E.  Cary  Street,  Richmond, 
VA  23219. 

EOE 


Venturi  seeks  D/B  App.  Dev.  for 
Sea/Bell  area  projects.  DESC: 
Arch.,  dsgn,  &  dev.  bus.  intell. 
sys.  &  rel.  apps  &  interiaces  util. 
RDBMS,  SQL,  VB,  extract, 
transform  &  load  tools,  reporting 
tools,  Unix  &  Win  o/s.  Dev.  data 
models  &  d/b  schemas.  Mng. 
data  migration  &  sys.  integration. 
Travel  to  client  sites.  REQ:  BS  in 
Engr.,  CS,  Math,  or  Phys.  +  3  yrs. 
full  life  cycle  dsgn,  dev,  &  impl. 
of  c/s  sys,  apps,  interfaces,  & 
RDBMS  util.  SQL,  HLL,  &  Win 
o/s.  1  yr.  performing  data  migration 
&  sys.  integration.  Prem.  sal., 
benes.S  bns.  Pis.  rep:  J.  King, 
Job#CCL-89,  11255  Kirkland 
Way.  Kirkland.  WA  98033. 


OH  Consulting,  Tech.  Services 
Firm  seeks  Programmer  Analyst 
to  code,  test,  debug  simple  and 
complex  maintenance  programs 
and  subroutines;  design,  develop 
large  size  complexity  program 
modules;  design  system  require¬ 
ments,  analyze  business  proce¬ 
dures  and  issues,  convert  them 
to  programmable  form  and  design; 
verify,  test  and  support  such 
requirements,  procedures,  issues 
and  programs;design.  develop 
web-based  reports  to  summarize 
and  analyze  Performance 
Management  metrics  gathered 
from  GSM  wireless  networks; 
maintain  user  database  for  the 
Web-base  applications.  Bachelor's 
Degree  in  Computer  Science  & 
min.  1  yr.  exp.  in  job  or  job  related. 
Must  have  exp.  with  Peri,  Java, 
HTML,  Shell  Script,  and  UNIX. 
Exp.  may  be  gained  before,  during 
or  after  degree.  Resumes 
to  Liberty  Communication 
Services,  Inc.  540  Officenter 
Place,  Ste.  200  Gahanna,  OH 
43230.  No  calls.  EOE 


CIGNIFY,  a  leading  information 
technology  company  in  time  & 
attendance  systems  currently 
seeks  applicants  for  the  following 
position  in  its  Atlanta,  GA  offices: 
Engineering  Manager.  Applicants 
for  this  position  must  have  a 
bachelor's  in  computer  science, 
engineering,  or  related  field  plus 
five  years  of  experience  in 
developing  client/server  and/or 
Web-based  technologies  and 
three  years  of  experience  in 
database  design,  implementation 
(PL/SQL  or  T-SQL)  and  tuning. 
Applicants  should  also  have  one 
year  of  experience  in  VB6.0, 
XML,  and  BizTalk/SOAP  and  two 
years  of  project  management 
experience  directing  lower-level 
engineers.  For  consideration, 
please  forward  your  resume  and 
letter  of  interest  by  mail  to: 
CIGNIFY  Corporation,  Vice 
President,  Engineering,  7000 
Central  Parkway,  Atlanta,  GA 
30328.  Please  do  not  email 
resumes.  EOE 


Bioinformatics  Scientist  to  provide 
technical  assist  on  enterprise 
bioinformatics  software  to  research 
scientists  at  client  sites  in  the 
U.S.  &  overseas.  Determine  & 
analyze  user  requirements  & 
code  customized  solutions  & 
automate  the  analysis  function 
of  software  for  biologists  &  bioin- 
formaticians,  using  base  scripts, 
Perl  &  Java.  Assist  in  the  design 
&  development  of  software  to 
meet  the  needs  of  the  bioscience 
research  community.  Reqd.  Ph.D 
in  biology  or  molecular  biology  & 
2  yrs.  exp  in  bio-science  research 
using  bio-technology.  M-F,  40/ 
hrs/wk.  Send  resume  to  I.  Sytnikov, 
HR,  Ref  #061002,  InofrMax,  Inc., 
7600  Wisconsin  Avenue,  11th 
Floor,  Bethesda,  MD  20814. 


SOFTWARE  CONSULTANT 

Analyze  &  evaluate  existing 
or  proposed  software  systems. 
Dsgn,  dvlp,  implmnt  and  improve 
programs,  systems  and  related 
procedures  to  process  data  using 
in-depth  knowledge  of  the  soft¬ 
ware  dvlpmnt  life  cycle.  Encode, 
test,  debug  and  install  operating 
programs  and  other  system 
software  utilizing  IBM  operating 
systems,  CICS/COBOL  lan¬ 
guages  and  DB2.  BS  degree  or 
equiv.  in  Comp.  Sci.,  Math,  Bus., 
Engnrng  or  Commerce  +  2  yrs  of 
exp.  in  position  offered  or  as  a 
Prog.  Analyst,  Soft.  Engnr  or  Sys. 
Analyst  reqd.  Exp.  must  include: 

a)  Operating  System:  IBM;  and 

b)  Languages:  CICS  and  COBOL; 

c)  Database:  DB2.  High  mobility 
preferred.  40  hrs/wk,  8  am  -  5  pm, 
OT  as  reqd,  $61 ,000/yr.  Qualified 
applicants  please  submit  resume 
to  JS  Supervisor,  Greene  County 
Team  PA  CareerLink,  4  West 
High  Street,  Waynesburg,  PA 
15370-1324.  Refer  to  Job  Order 
No.  WEB249039. 


SYSTEMS  PROJECT  DIREC¬ 
TOR,  BAAN 

Responsible  for  BaaN  ERP  (en¬ 
terprise  wide)  software  projects. 
Plan,  design,  &  direct  BaaN  pro¬ 
jects,  customizing/implementing, 
linking  to  web-based  custom  order 
processing,  inventory  manage¬ 
ment,  distribution  services,  virtual 
&  actual  warehousing.  Oversee 
customizing  BaaN  Finance,  Admin 
&  Distribution  modules.  Provide 
project  management  (develop 
budget,  time  schedule,  evaluate 
projects),  training,  supervise 
consultants  &  contractors.  Re¬ 
quires  MS  in  CS  or  MIS  &  3  yrs 
exp  BaaN  systems  proj.  dvlpmnt; 
or  BS  CS  or  MIS  &  5  yrs  exp 
large  database  design,  dvlpmnt, 
&  implementation  including  3  yrs 
BaaN  systems  project  dvlpmnt; 
exp  to  include  2  yrs  project 
mngmnt  or  leader  for  enterprise¬ 
wide  BaaN  implementation.  Also 
requires  demonstrated  ability  to 
use  BaaN  Finance,  Admin,  & 
Distribution  modules,  to  imple¬ 
ment  BaaN  on  Windows  NT  & 
MS  SQL  Server,  &  to  link  BaaN 
w/  standard  EDI  translators; 
knowledge  of  BaaN  Advanced 
Tools.  40  hrs/wk,  87-110K/yr. 
Send  2  resumes  to:  Case 
#20018393,  Labor  Exchange 
Office,  19  Staniford  Street,  1st 
Floor,  Boston,  MA  02114 


COMPUTER/IT 

Project  Eng’r,  Networks.  Fram¬ 
ingham,  MA.  Install  &  maintain 
routers  &  switches.  Configure 
routing  protocols  such  as  TCP/ 
IP,  IPX,  AppleTalk,  SNA,  SDLC, 
HDLC,  OSPF,  RIP,  RIP2,  EIGRP 
&  BGP.  Implement  LAN's  & 
WAN's,  Implement  security  in 
ntwrks.  using  Firewalls  &  VPN 
ntwrk.  devices  &  complete  req'd 
documentation  such  as  ntwrk. 
diagrams,  Layer  2  &  Layer  3 
ntwrk  documentation  &  installa¬ 
tion  rpt  documentation.  Provide 
tech,  support  &  troubleshoot. 
REQUIRES:  M.S.  in  Comp.  Sci., 
Elect  Eng’r,  or  related  field  with 
graduate  coursework  in  Comp. 
Ntwrks.  40  hrs/wk  plus  overtime 
as  needed.  Mail  resumes  w/  ad 
(no  calls):  D.  Schofield,  DiData, 
135  Newbury  St.,  Framingham, 
MA  01701. 


Axiom  Systems,  Inc.,  an  enter¬ 
prise  technology  company  cur¬ 
rently  seeks  applicants  for 
the  following  positions  in  its 
Alpharetta,  GA  location:  Senior 
Programmer  Analyst  -  analyze 
requirements,  design,  develop 
and  test  product  lifecycle  man¬ 
agement  and  workflow  customiza- 
tions  of  web-based  applications; 
PDM  Integration  Analyst  -  design, 
develop  and  test  seamless  inte¬ 
gration  of  PDM  and  CAD  systems;. 
PDM  Programmer  Analyst  -  an¬ 
alyze  requirements,  design,  de¬ 
velop  and  test  prodcut  lifecycle 
management  and  worfklow 
scenarios;  Programmer  Analyst 
-  analyze  requirements,  design, 
develop  and  test  Internet-based 
software  systems  and  applica¬ 
tions.  Applicants  for  these  positions 
must  have  a  bachelor's  or  master's 
degree  in  Computer  Science, 
Engineering  or  related  field  plus 
2-5  years  of  relevant  experience. 
For  consideration,  please  forward 
your  resume  along  with  letter 
specifying  position  applying  for, 
to:  Axiom  Systems,  Inc.,  Attention, 
Chuck  Stickels,  2550  Northwinds 
Parkway,  Suite  440,  Alpharetta, 
GA  30004.  EOE 


Sr.  Software  Design  Engr.  wanted 
by  a  software/hardware  dvlp.  Co. 
in  San  Jose,  CA.  Mail  resume  to 
HR,  SANIight,  Inc.  at  50  W.  San 
Fernando  St.,  Ste  420,  San 
Jose,  CA  95113. 


Noetix  seeks  Corp.  Web  Admin, 
for  HQ  office  in  Bellevue,  WA. 
DESC:  Analyze,  admin,  &  maint. 
peri.  &  content  of  corp.  internet  & 
intranet  sites.  Install  &  config. 
web  servers,  netwks,  site  &  sys. 
security  s/w.  Dsgn  &  dev.  web  & 
multimedia  apps.  that  access 
info,  stored  on  var.  RDBMS  util. 
SQL,  ASR  XML,  VBScript,  JScript, 
&  Macromedia  Flash  on  Win  o/s. 
REQ:  BS  in  Engr,  CS,  Phys,  or 
Math  +  2  yrs.  exp.  admin.  &  maint. 
pert.  &  content  of  corp.  internet  & 
intranet  sites;  install  &  config. 
web  servers,  netwks,  site  &  sys. 
security  apps;  dsgn  &  dev  web 
sites  &  web  apps.  to  access  info, 
on  RDBMS  util.  SQL,  ASP,  VB¬ 
Script,  JScript,  &  Win.  Plus  1  yr. 
exp.  dsgn.  &  dev.  multimedia 
apps.  util.  Macromedia  Flash. 
Prem.  sal.  +  benes.  Pis.  reply  to 
J.  Hubbs,  Job  #NC-105,  2229- 
1 12th  Ave  NE,  Ste.  200,  Bellevue, 
WA  98004. 


SALES  MANAGER 

Pelco,  Closed-circuit  TV  Manu¬ 
facturer,  located  in  Clovis,  CA  is 
hiring: 

Strategic  Accounts  Manager 
(Sales  Manager) 

Job  requires  travel  throughout 
the  U.S. 

REQ:  Bachelor's  degree  or  equiv. 
in  Bus.  Admin.,  Marketing  or 
related  field  (in  lieu  of  Bachelor's, 
will  accept  3  yrs  exper  in  job, 
mkting,  or  rel.)  +5  yrs  exper  in 
CCTV  &  video  equip  industry, 
incl.  3  yrs  marketing  exper  w / 
customer  strategies.  Resumes 
to:  Pelco,  HR,  Attn:  Kathy  Tucker, 
3500  Pelco  Way,  Clovis,  CA 
936 1 2  or  email  to  HR@oelco.com. 
Affirmative  Action/EOE. 


Software  Developers,  Gaithers¬ 
burg,  MD.  Analyze,  design, 
develop,  integrate,  test,  implement 
&  maintain  business  applications 
in  internet  architecture  using 
Lotus  Domino,  DB2,  DECS, 
XML,  Java,  Javascript,  DHTML, 
AS400,  and  MQSeries.  Train 
clients  in  the  use  &  operation  of 
new  applications.  B.S.  in  C.S., 
Math  or  related  &  5  yrs  rel.  exp. 
including  3  yrs  exp.  with  DB2 
or  RDBMS.  Experience  with  Lotus 
Notes/Domino,  Java,  and  Cus¬ 
tomer  Relationship  Management/ 
Sales  Information  System.  40 
hrs/wk.  Resume  to  B.  Smith, 
HR  #18,  Softelcomm,  lnc.849-C 
Quince  Orchard  Blvd,  Gaithers¬ 
burg,  MD  20878. 


Software  Engineer/Developer 
needed  to  assist  in  building 
an  SAP  EH&S  R/3  system. 
Requires  Masters  Degree  in 
Engineering  or  related  field  and 
2  years  experience  in  software 
development  which  may  precede 
Masters  Degree.  Resumes  to: 
Human  Resources,  Enterprism 
Solutions,  1  Little  Falls  Centre, 
Ste.  110,  Centerville  Rd., 
Wilmington,  DE  19808.  Refer 
to  job  code:  BDBC 


- ♦ - 

Systems  Analyst  wanted  by  FL 
based  Co.  Must  have  Master's 
degree  in  Comp.  Sc.  or  Engg., 
2  yrs.  of  exp.  in  Comp.  S/W 
dev.  and/or  cons.  Must  have 
proficiency  in  RDBMS,  VB,  VS, 
Weblogic,  XML.  Respond  to: 
GSNP  Corporation  d/b/a 
Howard  Johnson,  3314  S.  Dale 
Mabry  Hwy.,  Tampa,  FL  33629. 
(Ref.  GG  8205).  No  phone  calls. 


Project  Mgmt  Analyst  (Brunswick, 
New  Jersey):  Manage,  coordinate 
&  analyze  activities  re  info.  Tech, 
&  internet-based  projects.  De¬ 
termine  project  costs,  require¬ 
ments,  etc.  Requires:  2  yrs.  exp. 
in  job  offered  or  2  years  exp. 
as  a  mgmt  execut.  or  a  related 
position  with  same  duties  and 
’Bachelors  in  Business  Admin 
or  a  related  field.  ’Will  accept 
bachelor's  in  a  combination  of 
college  level  education  and 
experience.  Exp.  ref.  required. 
Salary:  $68,000/yr.  EOE.  Send 
resume  to:  Vertex  Soft,  Inc.,  622 
Georges  Road,  Ste.  104  N. 
Brunswick,  NJ  08902. 


Baan  Tools  Specialist 

You  will  be  responsible  for 
requirements  analysis  &  Baan 
ERP  implementation  to  support 
sales,  marketing  &  manufacturing. 
Ideal  candidate  will  have  Bache¬ 
lor's  degree  in  C.S.  or  related 
field  with  at  least  three  years 
experience  in  Baan  ERP  systems 
implementation  in  UNIX  &  NT 
environment.  Send  resume  to 
HR  Manager,  Stonhard,  Inc., 
P.O.  Box  308,  Maple  Shade,  NJ 
08052,  FAX:  (856)  321.7525, 
www.stonhard.com,  EOE, 
M/F/H/V.  No  phone  inquiries. 


Programmer-Analyst  for  specialty 
wire  and  cable  manufacturer  in 
Fort  Mill,  South  Carolina.  Minimum 
two  years  experience  developing, 
designing,  coding,  analyzing  and 
implementing  commercial  system 
applications  using  JAVA,  XML, 
and  DHTML,  performing  debug¬ 
ging  and  unit  testing  on  applica¬ 
tions  to  eliminate  errors  and 
ensuring  quality  operations. 
Requires  Bachelor  of  Science 
degree  in  Computer  Science. 
Send  resume  to  Recruiter-PA, 
Belden  Wire  &  Cable  Company, 
793  Fort  Mill  Highway,  Fort  Mill, 
SC  29715. 
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NV  Health  Care  seeks  System 
Analyst  to  analyze  and  develop 
business  information  technology 
projects;  maintain  applications; 
develop  extended  &  system  stored 
procedures;  configure  server; 
develop  reports;  upgrades 
system.  Min.  req:  Bachelor’s 
Degree  in  Electronics  Eng  or  equiv. 
based  on  a  credentials  evaluation, 
and  2  yrs.  exp.  in  job  or  job-related, 
which  includes  Programming, 
health/care,  laboratory  operations, 
Visual  Basic,  Unidata,  SQL  and 
Pick  programming.Travel  required. 
Resumes  to  H.R.  Dept,  4230 
Burnham  Ave.,  Las  Vegas,  NV 
89119.  No  calls.  EOE 


Programmer  Resources  Interna¬ 
tional  Inc  is  seeking  experi¬ 
enced  Programmer/Analysts 
with  Sytems  Architecture  back¬ 
ground  including  DB2  Stored 
Procedures,  NDM,  SQL,  etc. 
Applicants  please  forward 
detailed  resume  to  :  15620 
Manchester  Rd  Suite  210-22, 
Ellisville  MO  6301 1  Attn;  HR 
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Database  Administrator  to  design, 
develop  and  administer  oracle 
8/8i/9i  databases  in  sun  Solaris, 
sun  cluster,  linux  and  windows 
2000  environments.  Experience 
in  PL/SQL,  Pro'C.  Korn  scripting 
and  apache  web  server.  Require: 
BS  Degree  in  Computer  Science/ 
Engineering/Science,  or  a  closely 
related  field  with  four  years  of 
progressively  responsible  experi¬ 
ence  in  the  Job  offered  or  relat¬ 
ed  occupation  of  Programmer/ 
Analyst.  Extensive  travel  on 
assignments  to  various  client 
sites  within  the  US  is  required. 
Competitive  salary  offered. 
Apply  by  resume  to  :  Ravi 
Kandimalla,  President,  EVEREST 
COMPUTERS  INC.,  900  Old 
Roswell  Lakes  Parkway,  Suite 
300,  Roswell,  GA-30076:  Attn: 
JobJA 

Multiple  openings  for  permanent 
Programmer  Analyst/Quality  As¬ 
surance/Test  Engineer/Data- 
base  Administrator/System  or 
Network  Engineer/Business  An¬ 
alyst/Software  Engineer  posi¬ 
tions  from  entry  to  senior  level 
throughout  the  US.  Will  design, 
develop,  program  and  test  busi¬ 
ness  applications,  enterprise 
systems,  networks  and  computer 
systems  involving  TPF,  sales 
force  automation,  data  ware¬ 
housing,  business  metrics,  E- 
commerce,  Internet/Web  appli¬ 
cations  and  others  using  object- 
oriented  design  and  development, 
relational  database  modeling, 
distributed  systems  and  current 
Web  technologies.  Particular 
tools  include  one  or  more  of: 
JAVA,  C/C++,  Visual  Basic,  ASP, 
ActiveX,  UNIX,  PIVSQL,  SAP, 
Windows  NT,  Lotus  Notes,  Perl, 
COBOL,  IMS,  CICS,  DB2,  TPF, 
Assembler,  CORBA,  HP/UX, 
COM/DCOM,  OLE,  CGI,  Internet 
technologies  such  as  HTML, 
JDK  1 .2,  Java  Web  Server  2.0, 
EJB  in  Sun  Solaris,  Windows  NT 
95/98  and  others.  B.S.  in  Com¬ 
puter  Science,  Engineering, 
Math  or  related  area.  Will  accept 
combination  of  education,  training 
and  experience  in  lieu  of  degree. 
Prior  experience  and  M.S.  re¬ 
quired  for  some  positions.  Com¬ 
petitive  salary/401  (k)/benefits 
offered.  Most  active  locations 
include:  Atlanta,  GA,  Bloomington, 
MN,  Chicago,  IL,  San  Francisco, 
San  Jose,  CA,  Baltimore/ 
Columbia,  Maryland,  Durham, 
NC,  Ft.  Lauderdale,  FL,  Miami, 
FL,  Minneapolis,  MN,  Fairfax, 
Herndon  and  Richmond,  VA,  St. 
Louis,  MO  and  Winston-Salem, 
NC.  Send  resume  to:  IntelliMark, 
701  Emerson  Road,  Suite  445, 
St.  Louis,  Missouri  63141,  Attn: 
Betsy  Smith. 

Software  Engineer  to  design, 
development,  test  and  maintain 
embedded  systems,  products 
and  GUI  development  for  de¬ 
buggers  of  various  zilog  proces¬ 
sors.  Strong  object  oriented 
software  development  with  C++, 
VC++,  RTOS,  Debug  Monitors, 
XML,  MFC  and  Stingray.  Require: 
BS  Degree  in  Computer  Science/ 
Engineering/Science,  or  a  closely 
related  field  with  more  than  one 
years  of  progressively  responsible 
experience  in  the  Job  offered  or 
related  occupation  of  Programmer. 
Extensive  travel  on  assignments 
to  various  client  sites  within  the 
US  is  required.  Competitive 
salary  offered.  Apply  by  resume 
to  :  Ravi  Kandimalla,  President, 
EVEREST  COMPUTERS  INC., 
900  Old  Roswell  Lakes  Parkway, 
Suite  300,  Roswell,  GA-30076: 
Attn:  JobSR 

SOFTWARE  ENGINEER  to 
design,  develop,  test,  implement 
and  maintain  network  manage¬ 
ment  application  software  using 
Object  Oriented  Design/Pro¬ 
gramming,  C/C++,  Java,  Net 
Expert,  Rational  Rose,  UML, 
CORBA,  Oracle  RDBMS,  TCP/ 
IP,  TMN,  SNMP,  TL1 ,  ATM  and 
ADSL  under  UNIX  operating 
system;  Mentor  junior  engineers. 
Require:  B.S.  degree  in  Computer 
Science,  an  Engineering  disci¬ 
pline,  or  a  closely  related  field 
with  four  years  of  experience  in 
the  job  offered  or  as  a  Systems 
Engineer  or  Programmer/Ana¬ 
lyst.  Extensive  travel  on  assign¬ 
ment  to  various  client  sites  within 
the  U.S.  is  required.  Competitive 
salary  offered.  Apply  by  resume 
to:  Kenneth  T.  Miles,  MSI  Con¬ 
sulting,  6151  Powers  Ferry 
Road,  Suite  540,  Atlanta,  GA 
30339;  Attn:  Job  SH. 

SAP  Systems  Analyst  needed 
for  Consulting  and  Information 
Company  in  Alpharetta,  GA.  Job 
duties  include:  Utilizing  business 
and  technical  expertise  in  systems 
application  and  products  in  data 
processing  (SAP);  analyzing 
user  requirements,  procedures 
and  problem  to  automate  pro¬ 
cessing,  or  to  improve  existing 
computer  SAP  systems;and 
planning,  designing  and  imple¬ 
menting  an  integrated  family  of 
sales,  marketing,  and  customer 
service  applications.  Applicant 
must  have  Masters  in  Business 
Administration,  Computer  Science 
or  Engineering,  plu  3  yrs.  of  exp. 
in  SAP  FI/CO  modules  and  at 
least  2  yrs  exp  in  oil  and  gas 
modules.  8:00  am  to  5:00  pm 
Monday-Friday.  $102,000  per 
year.  Send  2  resume  and  cover 
letter  to  Heather  Arnold,  B2B 
Workforce,  Inc.  1 1 625  Rainwater 
Drive,  Suite  340,  Alpharetta,  GA 
30004 

Software  Consultant 
Design/code/implement  SAP 
applications  using  ABAP  pro¬ 
gramming;  implement  sortware 
lifecycle  with  respect  to  SAP; 
develop  real  time  interfaces  from 
SAP  to  EAI  and  MQ  series; 
design/code  SAP  script;  develop 
elec,  data  interchange  (EDI) 
scenarios  for  vendor  payments, 
bus.  apps.  prog,  interfaces 
(BAPIS);  extraction  programs; 
dev.  programs  for  DELTA  and 
refresh  loads  of  R/3  data;  design 
search  helps/data  inquiry 
dictionary  objects,  modify  SAP 
printing  programs.  Req.  Master’s 
in  Comp.  Sci.,  Eng.,  or  equiv. 
and  2  yrs.  exp.  in  job  offered  or  2 
yrs.  as  Software  Developer. 
Resume  to  HR,  GDKN,  300  S. 
Pine  Island  Rd.,  Ste.  3033 
Plantation,  FL  33324 

Sftwr  Services  Eng’r  (multiple 
positions).  Belmont,  CA.  Devel¬ 
op,  create  and  modify  web- 
based  applic.  sfwr  using  Java, 
XML,  SQL,  PERL,  &  JSP.  Resp. 
fortroubleshooting,  product  con- 
fig.,  customization  tasks,  data 
mapping,  plan  object  def'n,  and 
Ul  Elements.  Design  &  develop 
corresponding  white  box  &  black 
box  testing  scripts  &  methodolo¬ 
gies.  REQUIRES:  M.S.  (or  for¬ 
eign  equiv)  in  Comp.  Sci,  Mech. 
Eng'r,  Chem.,  or  related  field 
plus  1  yr  exp  in  job  offered  or  1 
yr  exp  as  a  Sftwr  Eng’r,  Sftwr 
Conslt,  or  Activations  eng’r  Exp., 
which  may  have  been  obtained 
concurrently,  must  include  1  yr 
exp  utilizing  Java  and  1  yr  exp  uti¬ 
lizing  XML.  Mail  resumes  (no 
calls)  to  Coralee  Traficante, 
Aptegrity,  Inc.,  155  PassaicAve., 
1st  FL,  Fairfield,  NJ  07004. 

NEED  TO  HIRE.  START  WITH  US. 

careers.com 


Sr.  Director  -  PeopleSoft  Solu¬ 
tions.  Job  location:  Chicago,  IL. 
Duties:  Resp.  for  the  delivery  of 
technology-related  services 
based  on  PeopleSoft  products. 
Resp.  for  recruiting,  develop.  & 
staffing  of  employees  w/in  the 
service  line.  Develop  &  execute 
annual  strategic  plans,  quarterly 
tactical  plans,  achieve  revenue 
&  margin  targets  &  mentor 
directors,  mgrs.  &  sr.  consultants. 
Define  &  develop  product  & 
service  offerings  for  clients.  Con¬ 
duct  qual.  assurance  reviews  of 
architectural  designs,  proposals 
&  contracts  as  well  as  the  delivery 
of  tech,  services.  Act  as  sr.  tech, 
resource  on  strategic  engage¬ 
ments,  developing  &  managing 
tech.  PeopleSoft  work  plans 
utilizing  knowl.  of  PeopleSoft 
Internet  Architecture  (PIA)  & 
infrastructure  requirements.  Lead 
tech,  team  members  incl.  Tech. 
Architects,  Database  &  Tech.  Ad¬ 
ministrators,  Appl.  Developers, 
Appl.  Integrators  &  Tech.  Spe¬ 
cialists.  Also  act  as  Tech.  Archi¬ 
tect  using  PeopleTools  to  provide 
complex  solution  designs  &  con¬ 
duct  qual.  assurance  reviews 
of  other  arch,  designs.  Mentor 
directors,  mgrs.  &  sr.  consultants. 
Requires:  B.S.  (or  foreign  equiv.) 
in  Comp.  Sci.,  Eng.,  Bus.  Adm.  or 
related  field  &  8  yrs.  exp.  in  the 
job  offered  or  8  yrs.  exp.  as 
a  Mgr.,  Consultant,  Systems 
Analyst  or  Prog./Analyst.  Con¬ 
current  exp.  must  incl.  5  yrs.  exp. 
developing  tech,  work  plans 
using  PeopleSoft  appls.  &  5  yrs. 
exp.  w/PeopleSoft  architecture  & 
infrastructure  requirements. 
EOE.  40  hrs./wk.;  8:00  a.m.  to 
5:00  p.m.  Send  resume  (no  calls) 
to:  Diane  Tuccito,  AnswerThink, 
Inc.,  817  W.  Peachtree  St.,  Ste. 
800,  Atlanta,  GA  30308.  Must 
have  legal  auth.  to  work  in  U.S. 


Systems  Analyst  to  analyze, 
design  user  requirements,  de¬ 
velop  computerized  applications 
for  the  automation  of  views  to 
large  databases  in  telecom  ap¬ 
plications.  Technically  sound  with 
hands  on  experience  in  design, 
building  Client-Server  Applica¬ 
tions,  n-Tier  Applications  and 
Distributed  Applications  Using 
RDBMS,  OOPs  ,  App  server, 
TCPIP,  MAPI  and  POP3,  Main¬ 
frames,  Shell  Scripting  &  System 
Programming.  Bachelors  degree 
in  Information  Systems,  Engi¬ 
neering  or  Computer  Science 
and  2  years  Experience.  Send 
resume  to  Pyramid  Consulting 
Inc.,  Attn:  HR  5335  Triangle 
Parkway,  Suite  510,  Norcross, 
GA  30092. 


Programmer/Analyst  to  design, 
develop,  test,  implement,  and 
support  in  client/server  environ¬ 
ment,  using,  C,  C++,  VC++ 
ORACLE,  SQL,  and  EDI  on 
Windows  NT  and  UNIX  Platforms. 
Require:BS  Degree  in  Computer 
Science/Engineering/Science,  or 
a  closely  related  field  with  3 
years  of  progressively  responsible 
experience  in  the  Job  offered  or 
related  occupation  of  Programmer. 
Extensive  travel  on  assignments 
to  various  client  sites  within  the 
US  is  required.  Competitive 
salary  offered.  Apply  by  resume 
to  :  Ravi  Kandimalla,  President, 
EVEREST  COMPUTERS  INC., 
900  Old  Roswell  Lakes  Parkway, 
Suite  300,  Roswell,  GA-30076: 
Attn:  JobKR 


Software  Developers 
Boca  Raton  co.  seeks  several 
software  developers  to  devel¬ 
op/design  under  direct  supervision 
of  Sr.  Developers  proprietary 
capture  and  workflow  mgmt. 
software,  document  image 
processing  functions,  image 
compression/decompression  al¬ 
gorithms,  internet  enabling  of 
doc.  imaging  using  C/C++,  Java, 
Bscan  scripting  language  and 
other  image  proc.  tools/scanner 
drivers.  Req.  a  BS  in  Comp.  Sci. 
and  1  or  more  yrs.  exp.  in  job  offered 
or  1  or  more  yrs.  exp.  as  Software 
Eng.  Resume  to  HR,  Purchase 
and  Delivery  Admin.  Services 
543  NW  77th  St„  Ste.  200  Boca 
Raton,  FL  33487.  No  calls 
please. 


COMPUTER/IT 

Computer  Systems  Eng.  Job 
Location:  Roswell,  GA,  Duties: 
Design,  dev.  &  maintain  comp, 
software  applications,  such  as 
DHTML,  JAVA,  and  C++.  Install 
and  setup  Computerized  Process 
Control  Management  Systems 
and  configure  customized  hard¬ 
ware  &  software.  Plan,  design, 
and  setup  a  computerized  pro¬ 
duction  process  utiliz.  AutoCAD 
2000  software.  Manage  teams 
for  configuring  collaborative  soft¬ 
ware  using  Woldvision  &  J.D.  Ed¬ 
wards.  Plan,  design  &  implement 
e-commerce  for  manuf.  environ¬ 
ments  by  implementing  global¬ 
ization  and  communic.  among 
different  commercial  co.’s  world¬ 
wide.  Research  &  dev.  Internet 
market  for  Process  Control 
Management  or  Wizard  Systems 
svcs.  Requires:  Bachelor’s  degree 
in  Computer  Science.  Employer 
will  accept  any  combination  of 
education  &  empl.  exp.  equiv.  to 
a  Bachelor’s  degree  in  Computer 
Science.  EOE.  40  hrs./wk.  Send 
resume  (no  calls)  to  Sam  Manafi, 
President,  Wizard  Systems  Inc., 
2403  Macy  Drive,  Roswell,  GA 
30076. 


PROGRAMMER/ANALYST  to 
analyze,  design,  develop,  debug, 
test,  implement  and  maintain 
web-based  application  software 
in  a  client/server  environment 
using  object  oriented  program¬ 
ming,  Visual  Basic,  Visual  Studio 
Intervev,  ASP,  ADO,  HTML,  VB¬ 
Script  and  JavaScript  under 
Windows  and  DOS  operating 
systems;  Bridge  Unisys  main¬ 
frame  with  Windows  operating 
system  for  inter-processing 
communications  using  middle¬ 
ware  software  including  Unisys 
ActiveLINC  and  PowerClient. 
Require:  Bachelor’s  degree  in 
Computer  Science/Engineering, 
Information  Systems,  or  a  close¬ 
ly  related  field  with  two  years  of 
experience  in  the  job  offered. 
Extensive  travel  on  assignments 
to  various  client  sites  within  the 
U.S.  is  required.  Competitive 
salary  offered.  Send  resume  to: 
William  A.  Openshaw,  Openshaw 
Media  Group,  Inc.,  3296  Cahaba 
Heights  Road,  Birmingham,  AL 
35243;  Attn:  Job  JS. 


Systems  Manager:  For  security 
products  manufacturing  co,  resp 
for  application  systems  dev, 
implementation  &  support,  incl 
maintenance  of  existing  Enterprise 
Resource  Planning  System,  Sales 
&  Production  Systems  applica¬ 
tions  developed  on  MS  Access  & 
Visual  FoxPro;  &  re-engineering 
of  applications,  incl  data  modeling, 
development  of  new  algorithms, 
programming,  testing  &  imple¬ 
mentation  using  relational  data¬ 
bases  &  modern  software  tools 
incl  Internet-based  access.  Req’s: 
Bachelor’s  degree,  or  equiv,  in 
Computer  Sci,  Eng  or  related 
field.  5  yrs  exp  in  job  offered  or  5 
yrs  application  software  exp. 
Exp  must  incl  data  modeling,  ap¬ 
plication  design,  development  & 
support.  Prof  in  MS  Access, 
FoxPro/Visual  FoxPro,  SQL, 
SQLServer,  Visual  Basic,  &  one 
modeling  tool  such  as  Erwin, 
PowerDesigner  or  Rational  Rose. 
Familiarity  with  one  Internet 
technology  such  as  Java.  40  hrs/ 
wk.  Send  resume  to  D.  Johnson, 
515  N.  Fraley  St.,  Kane,  PA 
16735. 


PROGRAMMER  ANALYSTS  re¬ 
quired  for  our  Warren,  NJ  office. 
Design,  develop  and  maintain 
software  applications  using 
DB2,  IMS  DB/DC/ADF,  Teradata, 
Datacom,  DB/DC,  PL/1,  Assem¬ 
bler,  Natural  ADABAS  and  also 
quality  assurance.  Bachelors 
Degree  required  in  Computers, 
Math  or  any  other  related  field  of 
study  +  2  years  experience  in  the 
job  described  above.  40  hrs/wk. 
Please  send  resume  to  HR 
Manager,  Computer  Manpower 
USA,  Inc.  15  Old  Forge  Drive, 
Warren,  NJ  07059. 
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Programmer  Analyst  (multiple 
openings):  Analyzes  user  re¬ 
quirements,  procedures,  and 
problems  to  automate  or  improve 
existing  systems  and  review 
computer  system  capabilities, 
workflow,  and  scheduling  limita¬ 
tions.  May  analyze  or  recommend 
commercially  available  software. 
Analyzes  science,  engineering, 
business,  and  other  data  pro¬ 
cessing  problems  for  application 
to  electronic  data  processing 
systems  using  relational  data¬ 
base  management  systems 
(RDBMS)  and  related  software. 
Must  have  one  year  of  experi¬ 
ence  using  one  of  the  following: 
Informix,  Oracle,  FoxPro,  Sybase, 
SQL  Server  or  Progress.  Must 
also  have  one  year  of  experience 
in  job  offered  or  as  a  computer 
professional.  Work  involves 
extensive  travel  and  frequent 
relocation.  Bachelor’s  degree  or 
foreign  equivalent  (3  or  4  year); 
or  equivalent  combination  of 
education  and  experience,  in 
one  of  several  limited  fields: 
Computer  Science/Apps,  Eng., 
Chem.,  Math,  Physics  or  scien¬ 
tific  or  business  related  field. 
Salary:  $67,000  per/yr,  40 
hrs/wk.,  8:00-5:00  p.m.  Please 
submit  resumes  to:  Manager, 
Armstrong  County  Team  PA 
CareerLink,  1270  North  Water 
Street,  PO  Box  759,  Kittanning, 
PA  16201-0759.  Reference:  Job 
Order  No.  WEB  249349 


Programmer  Analyst 

fIBM  Mainframe!  - 

Multiple  Openings 

Structured  systems  analysis, 
design,  development,  testing, 
quality  assurance,  implementa¬ 
tion,  integration,  maintenance, 
support  and  conversion  of  large 
volume  online  transaction  pro¬ 
cessing  arid  batch  application 
systems  in  a  multi-hardware/ 
multi-software  environment  over 
centralized  database  systems 
using  relational/hierarchical/net¬ 
work  database  management 
systems,  Third  Generation  Lan¬ 
guages  (3GLs),  Fourth  Genera¬ 
tion  Languages  (4GLs),  CASE 
tools  and  Transaction  Process¬ 
ing  Software.  Bachelor’s  Degree 
(or  equivalent)  in  Computer  Sci¬ 
ence-Math/Engineering/Sci¬ 
ence/Business-Commerce  and 
1  yr.  experience  in  job  offered  or 
as  Software  Engineer/Systems 
Analyst  are  required.  Must  have 
appropriate  combination  of  skills 
as  follows:  1  of  A  and  1  of  B  and 
1  of  C;  or  1  of  A  and  2  of  B;  or  1 
of  A  and  2  of  C.  A  includes  DB2, 
IMS  DB  and  IDMS  DB;  and  B  in¬ 
cludes  CICS,  IMS  DC,  IDMS  DC, 
ADS/O,  QMF,  VSAM  and  MF- 
Workbench;  and  C  includes 
TELON,  IEF,  ADW,  CSP  and 
APS;  High  mobility  preferred.  40 
hrs/week,  8  am  -  5  pm.  $66,829 
-  $78,000  per  year.  Qualified  ap¬ 
plicants  should  contact  or  send 
resume  to:  Manager,  Westmore¬ 
land  County  CareerLink,  300 
East  Hillis  Street,  Youngwood, 
PA  15697-1808.  Refer  to  Job 
Order  #  WEB  249047. 


Information  Technology 

Nexgenix,  a  leading  supplier  of  a 
new  category  of  Internet  profes¬ 
sional  services  called  e-Rela- 
tionship  solutions  is  seeking 
Technical  Architects,  Developers, 
Designers,  Analysts,  Project 
Managers,  Software  Engineers 
and  Strategists  in  the  following 
locations:  CA,  NC,  NJ  and 
Kansas  City.  Depending  on  the 
position,  applicants  must  possess 
a  Bachelor  or  Masters  Degree 
and/or  equivalent  combination  of 
education  and/or  experience 
and  related  skills. 

Resumes  should  be  submitted 
with  cover  letter  referencing  Ad 
#CW602  and  Job  Title  for  which 
resume  is  submitted  to:  Don 
Loewe,  320  Commerce,  Irvine,  CA 
92602.  APPLICATIONS  SUB¬ 
MITTED  WITHOUT  REFER¬ 
ENCE  TO  AD  #.  JOB  TITLE 
AND  LOCATION  WILL  NOT  BE 
ACCEPTED.  EOE  M/F/D/V 
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Data  Ties 

suppliers  that  it  expects  them 
to  implement  data  synchro¬ 
nization  capabilities  being  of¬ 
fered  by  Uniform  Code  Coun¬ 
cil  Inc.  in  Lawrenceville,  N.J. 

Two  top  grocers,  Ahold  USA 
Inc.  in  Chantilly,  Va.,  and 
Shaw’s  Supermarkets  Inc.  in 
West  Bridgewater,  Mass.,  are 
also  backing  the  effort.  And  19 
other  companies  joined  Wal- 
Mart,  Ahold  and  Shaw’s  in 
signing  an  open  letter  that  calls 
for  the  universal  adoption  of 
standards  being  established  by 
UCC  and  a  product  data  syn¬ 
chronization  hub  set  up  by  its 
UCCnet  Inc.  subsidiary. 

The  goal  is  to  lower  costs  for 
retailers  and  manufacturers 
alike  by  using  UCCnet’s  XML- 
based  information  registry  to 
help  reduce  inventories  and 
product  shipment  expenses. 
But  officials  involved  in  the  ef¬ 
fort  acknowledged  that  compa¬ 


nies  might  have  to  make  big  IT 
changes  in  order  to  participate. 

Johan  Sauer,  global  business 
development  executive  at  on¬ 
line  exchange  Transora  Inc.  in 
Chicago,  said  there  will  be  a 
dramatic  increase  in  the 
amount  of  data  that  manufac¬ 
turers  must  provide  to  retail¬ 
ers.  He  likened  the  necessary 
IT  work  to  the  installation  of  a 
full-blown  enterprise  resource 
planning  (ERP)  system. 

Procter  &  Gamble  Co.  and 
seven  other  manufacturers 
have  started  using  Transora  as 
a  clearinghouse  that  collects 
their  product  data  and  sends  it 
to  UCCnet’s  registry.  Sauer 
said  Transora  had  to  combine 
nine  different  applications  to 
build  a  data  catalog  and  has  set 
up  a  workflow  of  35  separate 
steps  to  manage  the  data  it 
shares  with  UCCnet. 

But  all  of  that  work  might 
prove  worthwhile  in  the  long 
run,  Sauer  added.  “What  [UCC¬ 
net]  did  was  kick  us  all  in  the 
butt  and  make  us  move,”  he 
said.  The  development  work 
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TRANSORA  INC. 

was  completed  in  February, 
and  Transora  now  collects  data 
on  up  to  230  attributes  per 
product  and  converts  it  all  into 
XML  documents  that  are  fed 
into  UCCnet’s  systems. 

Milan  Turk  Jr.,  director  of 
customer  e-business  at  P&G, 
said  the  new  data  synchroniza¬ 
tion  capabilities  are  the  culmi¬ 
nation  of  extensive  in-house 
ERP,  supply  chain  and  applica¬ 
tion  integration  work  at  P&G. 

“Our  work  plan  for  the  past 
couple  of  years  has  been  build¬ 
ing  [systems]  so  that  we  can  be 
standards-compliant,”  he  said. 
P&G  began  passing  limited 
amounts  of  data  through  Tran¬ 
sora  to  UCCnet  in  April,  and 
Turk  said  the  system  should  be 


Orade,  DeN,  Red  Hat  Target 
Enterprise  With  Linux  Bundle 


System  challenges 
Unix  midrange  turf 


BY  TODD  R.  WEISS 

Linux  may  not  yet  be  revolu¬ 
tionizing  business  IT,  but  its 
evolution  continued  last  week 
when  three  vendors  teamed  up 
to  announce  a  server/database 
bundle  that  runs  on  the  open- 
source  operating  system. 

Oracle  Corp.,  Dell  Computer 
Corp.  and  Red  Hat  Inc.  said 
they’re  jointly  developing  and 
testing  a  system  that  combines 
Dell  servers,  the  Oracle9i  data¬ 
base  and  Red  Hat’s  Advanced 
Server  Linux  software.  The 
out-of-the-box  configuration  is 
aimed  at  taking  on  Unix  sys¬ 


tems  for  corporate  application 
uses,  the  companies  said. 

For  users,  the  Intel-based 
Linux  bundle  is  being  touted 
by  the  three  vendors  as  an  of¬ 
fering  that  equals  the  perfor¬ 
mance  of  Unix  midrange  sys¬ 
tems  at  a  lower  cost,  said  Dan 
Kusnetzky,  an  analyst  at  IDC  in 
Framingham,  Mass. 

“It’s  not  the  end  of  the  jour¬ 
ney,  but  it’s  an  important  mile 
marker”  in  the  progression  of 
Linux  into  business  comput¬ 
ing,  Kusnetzky  said. 

Bill  Claybrook,  an  analyst  at 
Aberdeen  Group  Inc.  in 
Boston,  said  the  alliance  will 
help  the  three  companies  gain 
credibility  as  Linux  continues 
to  take  hold  with  users. 

For  customers,  running  the 


Package  Pricing 

Sample  pricing  and 
configurations: 

$11,900  per  node  for  a  Power- 
Edge  6400  server,  1GB  RAM, 

four  36GB  hard  drives 

- - — . 

$100,000  for  two  two-way 
nodes,  360GB  storage,  one 
switch  and  a  storage  array 

$345,000  for  four  four-way 
nodes,  1TB  storage,  multiple 
switches  and  a  storage  array 


Oracle  database  with  Raleigh, 
N.C.-based  Red  Hat’s  software 
using  Dell  hardware  should  of¬ 
fer  a  price/performance  advan¬ 
tage  compared  with  Unix  sys¬ 
tems,  Claybrook  said. 

In  most  cases,  Claybrook 
noted,  users  can  buy  four  four¬ 
way  Dell  servers  running  Ora¬ 
cle  and  Linux  for  less  than  a  12- 
way  or  16-way  RISC  Unix  sys¬ 
tem.  “There’s  a  pretty  hefty 
savings  there,”  he  said.  I 


ready  for  a  full  changeover  lat¬ 
er  this  year. 

Sara  Lee  Corp.’s  bakery  divi¬ 
sion  in  St.  Louis  has  also  had  to 
make  big  IT  changes.  To  get  its 
warehouse  operation  ready  to 
take  part  in  UCCnet,  Sara  Lee 
first  had  to  add  its  frozen 
dough  business  to  the  unit’s 
SAP  ERP  system,  said  Martha 
Uhlhorn,  executive  vice  presi¬ 
dent  of  e-commerce  at  Sara 
Lee  Bakery  Group.  Informa¬ 
tion  from  the  system  will  be 
sent  via  electronic  data  inter¬ 
change  transmissions  to  Tran¬ 
sora  and  then  on  to  UCCnet. 
The  process  also  required 
some  jury-rigging,  Uhlhorn 
said.  “SAP  doesn’t  have  a  field 
for  all  the  information  we  need 
to  supply  [to  UCCnet],  so  we’ll 
send  an  auxiliary  transmission 
to  fill  in  the  other  fields.” 

Multiple  Hubs? 

The  IT  investment  could  be 
especially  daunting  for  compa¬ 
nies  that  “have  not  even  begun 
to  electronically  talk  to  their 
partners,”  said  Gene  Alvarez, 
an  analyst  at  Meta  Group  Inc. 
in  Stamford,  Conn. 

UCCnet  also  may  not  be  the 
only  data  hub  to  which  suppli¬ 
ers  need  to  link  their  systems. 

Marco  Carrillo,  manager  of 
business  and  technology  at 
Chiquita  Brands  International 
Inc.  in  Cincinnati,  said  other 
grocers  that  have  yet  to  sign  on 
with  UCCnet  could  require 
completely  different  data  sub¬ 
missions.  “The  retail  industry 
does  not  have  a  clear  vision  of 
where  it  wants  to  go,”  Carrillo 
said.  “To  be  honest,  I’d  like  to 
only  integrate  once.” 

About  100  companies  have 
signed  up  to  use  the  UCCnet 
registry,  well  below  a  goal  of 
getting  600  subscribers  by  June 
1  that  was  set  by  its  backers.  But 
a  UCCnet  spokeswoman  said 
there’s  still  time  to  get  600 
users  online  by  year’s  end.  > 


UCCNET’S  CAPABILITIES 

For  more  details  about  the  workings  of  the 
UCCnet  data  registry,  head  to  our  Web  site. 

QuickLink:  30386 
www.computerworld.com 


Some  Suppliers 
Get  Extra  Time 

Not  all  trading  partners  of  retailers 
involved  in  the  data  synchroniza¬ 
tion  effort  will  be  forced  to  start 
using  UCCnet’ s  product  data  reg¬ 
istry  this  year.  Suppliers  of  perish¬ 
able  goods  are  being  given  until 
late  next  year  to  make  the  switch, 
and  some  IT  managers  said  they 
need  the  extra  time. 

“We  have  a  proliferation  of 
computer  systems,  and  right  now 
they  are  not  able  to  work  together 
in  a  way  that  could  meet  these  re¬ 
quirements,”  said  Marco  Carrillo, 
manager  of  business  and  technol¬ 
ogy  at  Chiquita  Brands  Interna¬ 
tional  in  Cincinnati. 

Carrillo  said  he’s  thankful  not  to 
be  on  the  front  line  for  the  UCCnet 
implementation,  giving  Chiquita 
time  to  complete  a  full  review  of  its 
systems  and  business  processes. 
“We  can  also  learn  from  the  others 
who  went  first,”  he  said. 

Martha  Uhlhorn,  executive  vice 
president  of  e-commerce  at  Sara 
Lee  Bakery  Group  in  St.  Louis,  said 
the  baked  goods  part  of  its  busi¬ 
ness  -  which  accounts  for  75%  of 
sales  -  is  nowhere  near  ready 
from  an  IT  perspective.  “I  couldn’t 
do  it  today  if  they  put  a  gun  to  my 
head,”  she  said. 

While  Sara  Lee  was  able  to  pre¬ 
pare  its  smaller  warehouse  division 
to  support  the  UCCnet  proposal, 
Uhlhorn  said  the  baked-goods  unit 
will  require  a  completely  different 
fix.  That  operation  uses  a  set  of 
homegrown  applications  instead 
of  Sara  Lee’s  SAP-based  enterprise 
resource  planning  system. 

“Nowhere  in  my  legacy  systems 
do  I  have  all  of  that  [UCCnet-re- 
quired]  information  in  one  spot,” 
Uhlhorn  said.  Her  long-term  plan  is 
to  send  baked-goods  product  data 
“in  bits  and  pieces"  to  the  Transo¬ 
ra  online  exchange,  which  will  pool 
the  data,  pass  the  information  on 
to  UCCnet  and  send  it  back  to 
Sara  Lee  as  a  single  file. 

But  first,  Uhlhorn  said,  Sara  Lee 
needs  to  set  up  a  system  that  can 
store  all  the  data.  A  budget  and 
schedule  for  that  project  have  yet 
to  be  determined,  she  added. 

-  Michael  Meehan 
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Open-Source  Hot  Air 


r~  OOKS  LIKE  IT’LL  BE  A  LONG,  HOT  SUMMER  —  at  least 
when  it  comes  to  politics  and  open-source  software.  Last 
week,  Ralph  Nader  sent  a  letter  to  the  White  House  sug¬ 
gesting  that  the  government  use  its  purchasing  power  to 

L _ J  keep  Microsoft  in  line  by  adopting  open-source  software 

[QuickLink:  30404].  That  was  just  after  a  Microsoft-funded  think 
tank,  the  Alexis  de  Tocqueville  Institution,  announced  the  publica¬ 
tion  of  a  white  paper  arguing  that  the  government  shouldn’t  use 
open-source  software  because  it  would  pose  a  national  security  risk. 


. 


Competing  masses  of  hot  air  in  Washington 
are  nothing  new.  Neither  is  government  use  of 
open-source  software  —  that’s  been  steadily  in¬ 
creasing,  both  in  the  U.S.  and  abroad.  And  that’s 
good  news  for  corporate  IT  people,  since  it 
means  somebody  else  is  doing  the  work  to  eval¬ 
uate  the  software,  so  we  don’t  have  to. 

It  also  puts  pressure  on  Microsoft  —  which 
has  lobbied  furiously  against  federal  use  of 
open  source  —  to  close  security  holes,  improve 
quality  and  cut  better  deals  with  customers. 
That’s  the  kind  of  leverage  we’d  like  to  have 
with  any  IT  supplier. 

Trouble  is,  we’re  not  going  to  get  any  leverage 
from  the  most  recent  round  of  rhetoric. 

Consider  Nader’s  letter.  It’s  nominally  a  re¬ 
quest  for  information  from  the  Office  of  Man¬ 
agement  and  Budget.  (“Approximately  how 
much  money  has  the  federal  government  spent 
each  of  the  past  seven  years  to  license  MS  Win¬ 
dows  for  the  client  platforms?”)  But  the  letter  is 
really  a  proposal  that  the  government  use  open 
source  to  pressure  Microsoft. 

True,  the  government  has  done  this  before. 
That’s  how  a  previous  Seattle-based  high-tech 
giant  was  broken  up  in  1934  into  today’s  United 
Air  Lines  Inc.,  The  Boeing  Co.  and  United  Tech¬ 
nologies  Corp.  William  Boeing’s 
United  Aircraft  and  Transport 
Corp.  wasn’t  dismantled  by  an  anti¬ 
trust  lawsuit,  but  because  the  feder¬ 
al  government  refused  to  give  air¬ 
mail  business  to  a  monopoly. 

But  how  likely  is  the  Bush  White 
House  to  apply  that  kind  of  pres¬ 
sure  to  Microsoft?  Not  very.  The 
Nader  letter  isn’t  a  serious  proposal 
—  it’s  just  a  lot  of  gas.  And  IT  gets 
no  leverage  from  that. 

The  Tocqueville  think  tank’s 
pitch  is  even  lamer  —  it  suggests 
that  using  open  source  would  “alter 


the  very  foundation  of  computer  security”  be¬ 
cause  bad  guys  can  see  open-source  software’s 
architecture  and  source  code. 

Sure,  but  “security  through  obscurity”  —  just 
trying  to  hide  that  information  —  doesn’t  work. 
And  it  isn’t  necessary.  For  example,  bad  guys 
can  also  see  the  details  of  the  most  successful 
encryption  algorithms,  but  that  doesn’t  make 
crypto  easier  to  crack.  And  though  the  source 
code  for  commercial  software  isn’t  available, 
hackers  and  terrorists  can  buy  exactly  the  same 
product  a  government  agency  uses,  then  experi¬ 
ment  to  find  security  holes  at  their  leisure. 

But  with  open  source,  government  IT  shops 
can  patch,  customize  and  recompile  at  will. 

(And  don’t  kid  yourself  —  any  patches  the  gov¬ 
ernment  deems  secret  won’t  go  into  the  public 
domain,  GNU  license  or  no.)  That  kind  of  flexi¬ 
bility  explains  why  Mitre  Corp.,  which  has  ana¬ 
lyzed  computer  security  for  the  Defense  De¬ 
partment  since  Bill  Gates  was  still  in  short 
pants,  recommended  last  month  that  the  Penta¬ 
gon  keep  using  open  source  for  lower  costs  and 
improved  security. 

From  the  Tocqueville  think  tank,  we  got  no 
real  security  analysis  —  just  more  gas.  These 
guys  and  Ralph  Nader  deserve  each  other. 

There  is  a  serious  debate  under 
way  on  the  virtues  and  shortcom¬ 
ings  of  open  source.  It  looks  like  we 
just  won’t  hear  any  of  it  in  Washing¬ 
ton  this  summer. 

Maybe  it  seems  obvious,  but  as 
the  rhetoric  heats  up,  it’s  worth  say¬ 
ing  again:  The  real  question  about 
open-source  software  —  or  any  IT 
system  —  isn’t  who  makes  it,  or 
how.  The  question  is  whether  it  can 
do  the  job  you  need  it  to  do,  with 
the  effectiveness,  security,  reliability 
and  support  you  require. 

The  rest  is  just  hot  air.  I 


kaSc-  vV, 

frank  hayes,  Computer- 
world's  senior  news  colum¬ 
nist,  has  covered  IT  for  more 
than  20  years.  Contact  him  at 

frank_hayes@computerwortd.com. 


THERE’S  a  dark  stain  on  the 
week-old  desk  when  support 
pilot  fish  arrives  to  replace  a  de¬ 
fective  mouse.  And  the  defect? 
The  body  is  black,  and  the  cord 
has  been  melted  off.  User  con¬ 
fesses  she  tried  to  cover  the  un¬ 
pleasant  new-desk  smell  with  a 
scented  candle  -  which  set  her 
reports  on  fire  and  torched  the 
mouse,  too.  “I  told  the  auditor 
the  problem  was  a  hot  user,” 
fish  says.  “He  didn’t  buy  it.” 

SCHOOL  principal  tells  IT  pilot 
fish  that  all  his  school’s  mice 
need  replacing  “because  they  no 
longer  move  properly.”  Maybe 
they  just  need  a  good  cleaning, 
fish  says.  “That's  not  possible," 
says  principal.  Fearing  students 
would  remove  the  mouse  balls, 
he  had  glued  shut  all  250  brand- 
new  mice.  “He  insisted  this 
should  be  covered  under  warran¬ 
ty,”  says  fish.  “Yeah,  right." 

HMO  STAFFER  calls  the  help 
desk  -  her  mouse  has  died 


again.  “I  brought  another  new 
mouse  to  her  workstation,"  sighs 
long-suffering  pilot  fish,  “and 
explained  one  more  time  that 
you  do  not  plug  in  the  mouse 
with  a  twisting  motion.” 

PC  ON  THIS  plant  floor  gets 
flaky,  so  IT  pilot  fish  swaps  it  out 
to  diagnose  the  problem.  “It  was 
on  the  same  table  as  the  coffee 
pot,  along  with  the  sugar  and 
cream,”  fish  says.  “Inside  the  PC, 
there  was  sugar  everywhere  - 
the  CPU  was  covered  in  melted 
sugar.”  And  he  finds  the  nest  of 
a  mouse  -  the  live  kind  -  that 
dragged  all  those  sugar  packets 
in  through  an  uncovered  slot  on 
the  back  of  the  PC. 

Click  on  this  one:  sharky® 
computerworld.com.  You 

score  a  sharp  Shark  shirt  if  we 
use  your  true  tale  of  IT  life.  And 
check  out  the  daily  feed,  browse 
the  Sharkives  and  sign  up  for 
Shark  Tank  home  delivery  at 
computerworld.  com/sharky. 


The  5th  Wave 
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Dell  Small  Business 


PowerConnect™  2016/2024*  Switch  PowerConnect™  2124*  Switch 


Cost-Efficient,  Easy-To-Use  Unmanaged  Switches 

•  16  and  24  Port  Fast  Ethernet  Switches 

•  Up  to  4.8  Gbps  of  Wire-Speed  Switching  Capacity 

•  Easy  to  Install,  No  Configuration  Needed 

•  1-Yr  Next  Business  Day  Parts  Replacement® 


Cost-Efficient,  High  Bandwidth  Unmanaged  Switches 

•  24  Fast  Ethernet  Ports  Plus  1  Built-In  Gigabit  Port 

•  Up  to  6.8  Gbps  of  Wire-Speed  Switching  Capacity 

•  Easy  to  Install,  No  Configuration  Needed 

•  1-Yr  Next  Business  Day  Parts  Replacement® 


From 


E-VALUE  Code:  11630-S10601 


Recommended  upgrade: 

•  3-Yr  Next  Business  Day  Parts  Replacement,®  add  $30 


$299 

E-VALUE  Code:  11630-S10602 


Recommended  upgrade: 

•  3-Yr  Next  Business  Day  Parts  Replacement,®  add  $59 


With  Dell  PowerConnecCswitches,  performance  and  reliability  can 
cost  up  to  50%  less  than  the  competition.  For  first  time  networks  or  even 
expanding  data  centers,  you  can  count  on  powerful  Dell  PowerConnect  managed  and  unmanaged 
switches  to  handle  your  business  needs.  Equipped  with  industry-standard  technology,  PowerConnect 
switches  are  highly  interoperable  with  other  networking  products.  So  they  easily  integrate  into  an 
existing  network,  while  still  giving  you  the  compatibility  you  need  for  future  growth.  Of  course,  they're  all 
backed  with  Dell's  award-winning  service  and  support,  including  Next  Business  Day  Parts  Replacement. 


PowerConnect™  3024*  Switch  PowerConnect™  5012*  Switch 


Scalable,  High-Performance  Managed  Switches 

•  24  Fast  Ethernet  Ports  Plus  2  Built-In  Gigabit  Ports 

•  Up  to  12.8  Gbps  of  Wire-Speed  Switching  Capacity 

•  Stackable  (Cable  Included  Supports  Up  to  6  in  a  Stack) 

•  Slim,  Rack-Mountable  1U  Form  Factor 

•  3-Yr  Next  Business  Day  Parts  Replacement® 

or  as  low  as  $20/mo„  (46  pmtsf")  60  Days 
VflU  Same-As-Cash  for  qualified  customers 

E-VALUE  Code:  11630-S10606 


High-Performance  All-Gigabit  Managed  Switches 

•  1 0  Built-In  Copper  Gigabit  Ports  Plus  2  GBIC  Slots 

•  Up  to  24  Gbps  of  Wire-Speed  Switching  Capacity 

•  Remote  Access  and  Management  Capabilities 

•  Slim,  Rack-Mountable  1U  Form  Factor 

•  3-Yr  Next  Business  Day  Parts  Replacement® 

a*  M  or  as  low  as  $37/mo.,  (46  pmts?0)  60  Days 

Jp  |  Same-As-Cash  for  qualified  customers 

I  E-VALUE  Code:  11630-S10612 


Recommended  upgrade:  Recommended  upgrade: 

•  3-Yr  7X24  Same  Day  Parts  and  On-Site  Service,  add  $147  •  3-Yr  7X24  Same  Day  Parts  and  On-Site  Service,  add  $200 


Choosing  Dell  PowerConnect  switches  means  you  won't  have  to  sacrifice  performance  for  price.  And 
that's  a  concept  you  should  definitely  plug  into. 


Growing  your  network.  Easy  as 


D^LL 


Visit  www.dell.com/switch  or  call  toll  free  1-800-757-1424. 


Call:  M-F  7a-8p  Sat  8a-5p  CT.  Pricing,  specifications,  availability  and  terms  of  offer  may  change  without  notice.  Taxes  and  shipping  charges  extra,  and  vary.  U.S.  Dell  Small  Business  new  purchases  only.  Dell  cannot  be  held  responsible  for  errors  in 

typography  or  photography. 

*This  device  lias  not  been  approved  by  the  federal  Communications  Commission  for  use  in  a  residential  environment.  This  device  is  not.  and  may  not  be.  offered  for  sale  or  lease,  or  sold  or  leased  for  use  in  a  residential  environment  until  the  approval 

of  the  FCC  has  boon  obtained. 


^Monthly  payment  is  based  on  a  48-month  12  99% 
aqgregale  financed  amounts  nnt  to  exceed  $25  090 

are  extra  and  may  vary  Not  valid  on  past  orders  or  financing  Qurckloan  is  from  CIT  Online  Bank  to  Dell  Small  Business  (BSD)  online  customers  with  app*oved  credit  "Service  or  replacement  unit  (d 
ttvrd  party  provider  Technician  or  replacement  unit  wrll  be  dispatched  if  necessary  following  phone  based  troubleshooting  fo  receive  next  business  day  service.  Del!  must  notify  the  service  piovder  uel 
time.  Availability  varies.  Dell,  the  stylized  F  logo.  E-VALUE,  and  PowerConnect  are  trademarks  of  Dell  Computer  Corporation.  Dell  cannot  be  held  responsible  for  errors  in  typography  or  photogrannv  *  a 
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USE  THE  POWER  OF 
THE  E-VALUE  CODE. 

Match  our  latest  technology 

with  out  latest  prices  Enter  the 

•won*. 

E-VALUE  code  online  or  give  it 

VALUE 

to  your  sales  rep  over  the 
phone  www  del*  uom/evarue 

Oracle9/  JDeveloper 

Web  Services 


“Oracle9i  JDeveloper  isn’t  just  a 
Java  coding  tool;  it’s  intended  to 
act  as  an  on-ramp  to  the  Web 
services  journey.” 

sWeek 

THE  ENTERPRISE  NEWSWEEKLY 

“While  Oracle9i  aims  to  satisfy  a 
number  of  scenarios,  the  new 
JDeveloper  release  strongly 
supports  Oracle’s  larger  strategic 
course  toward  Web  services.” 

intell'M$rise 


“Oracle9i  JDeveloper: 

An  alternative  to  .NET.”  ■  wmm 

m 


MAGAZINE 
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“JDeveloper  marks  the  start  of  a 
new  push  for  Oracle...  Oracle  is 
well  positioned  to  provide  a  stack 
for  Web  services.” 

InfoWorid 


JDeveloper  makes  building 
web  services  fast  and  easy. 

Buy  it  for  $995. 


oracle.com/ad 
or  call  1.800.633.1072 
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